Static task
static1
Behavioral task
behavioral1
Sample
b1bba1f8422b80dfc4ce9b3c8e481ae26aaf8fac2cce4bcf1c9f1b6ba688ccaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1bba1f8422b80dfc4ce9b3c8e481ae26aaf8fac2cce4bcf1c9f1b6ba688ccaf.exe
Resource
win10v2004-20221111-en
General
-
Target
b1bba1f8422b80dfc4ce9b3c8e481ae26aaf8fac2cce4bcf1c9f1b6ba688ccaf
-
Size
307KB
-
MD5
187a7ce5632ef6d2b2e50190a3239413
-
SHA1
6392150df3bcecc2bfbd0b754f411ec1694512fd
-
SHA256
b1bba1f8422b80dfc4ce9b3c8e481ae26aaf8fac2cce4bcf1c9f1b6ba688ccaf
-
SHA512
0b49bcd9a0d1b385f742094ea5af316bf2f5a2cc2cf3673baca6eef22ae8bc6bf17733eaed61cf68e629fbb4f8cbff7878986d36d604a91de34f32145c58e953
-
SSDEEP
6144:E8zkERLFC0U/MLUO2OKiE+ha3P1ezjilrysHSrcV2XNnYduNJn7mb:E8zrLFSkgOKifeGfRosXFCgn7mb
Malware Config
Signatures
Files
-
b1bba1f8422b80dfc4ce9b3c8e481ae26aaf8fac2cce4bcf1c9f1b6ba688ccaf.exe windows x86
4de8980884ad14b5a37230f0d6cf0a37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Module32Next
Module32First
CreateToolhelp32Snapshot
GetProcAddress
GetModuleFileNameA
CreateMutexA
OpenMutexA
CreateFileA
GetFileSize
ReadFile
GetCurrentProcessId
CloseHandle
GetStartupInfoA
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcrt
free
memset
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ