Static task
static1
Behavioral task
behavioral1
Sample
b2d9ab396310e1bd2d3d3e0973370523092fc3457712176a34092aee1a205ae6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2d9ab396310e1bd2d3d3e0973370523092fc3457712176a34092aee1a205ae6.exe
Resource
win10v2004-20220812-en
General
-
Target
b2d9ab396310e1bd2d3d3e0973370523092fc3457712176a34092aee1a205ae6
-
Size
179KB
-
MD5
34e5ebc8f394e8b150d54af67d2a7be2
-
SHA1
15dd4a29c714bc25a6ffc8bb83adb04ce1ed09c3
-
SHA256
b2d9ab396310e1bd2d3d3e0973370523092fc3457712176a34092aee1a205ae6
-
SHA512
d6ae5db31614234b8709886559e776e541a863ce2eda9e3434e7d91d9bcf2db5bbf057aa5a6a248afd4fb3b760ac56ed40322d2da808af0e9f393e751f497acf
-
SSDEEP
3072:w5VFykbeMLO5z6fNwdaYAGABpBjX2Nygo4i3J/09ZRUi6Scq:wDwkqV5aN4aM6rjX0k3Zk
Malware Config
Signatures
Files
-
b2d9ab396310e1bd2d3d3e0973370523092fc3457712176a34092aee1a205ae6.exe windows x86
ef157bebb1e840612d8ee7b460e32700
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
MoveFileA
HeapFree
GetModuleHandleW
WideCharToMultiByte
LoadLibraryExA
GetCurrentThread
lstrlenW
GetFullPathNameA
RaiseException
GetCommandLineW
ExitThread
GetProcAddress
GetThreadLocale
GetCommandLineA
VirtualAlloc
ReadFile
ExitProcess
version
VerInstallFileA
advapi32
RegCreateKeyA
msvcrt
asin
pow
cos
shell32
SHFileOperationA
ole32
OleRun
CreateBindCtx
StringFromIID
CoCreateInstanceEx
CoCreateGuid
CoFreeUnusedLibraries
Sections
CODE Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ