Static task
static1
Behavioral task
behavioral1
Sample
b2412903caa96c6437212677fe5165e36cbdc499735f073f26c589685e95b4a0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b2412903caa96c6437212677fe5165e36cbdc499735f073f26c589685e95b4a0.exe
Resource
win10v2004-20221111-en
General
-
Target
b2412903caa96c6437212677fe5165e36cbdc499735f073f26c589685e95b4a0
-
Size
253KB
-
MD5
33c23ddcd80e9aa51a9536271f9e371d
-
SHA1
c3025b72a808a53fd2d83829454c733b60ace520
-
SHA256
b2412903caa96c6437212677fe5165e36cbdc499735f073f26c589685e95b4a0
-
SHA512
8ad72d9a1c9652e02234e2e89b123e37375f1fca19925ae32c3737b4f7eaea63ec0763831c627f5aad49fb5d8f3bb3e37ef5c2a1ef648f4133aa9f4e3f508857
-
SSDEEP
6144:p3Oip/Yr4upi95jTuS/TBSkomd0+lHVOq4rbgCM:JEgDSko5MVb
Malware Config
Signatures
Files
-
b2412903caa96c6437212677fe5165e36cbdc499735f073f26c589685e95b4a0.exe windows x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 118KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE