Static task
static1
Behavioral task
behavioral1
Sample
b637cd0693c0c9f6241d97deeb3ce51d0570edbfd9007a578d4472e0e7929d52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b637cd0693c0c9f6241d97deeb3ce51d0570edbfd9007a578d4472e0e7929d52.exe
Resource
win10v2004-20221111-en
General
-
Target
b637cd0693c0c9f6241d97deeb3ce51d0570edbfd9007a578d4472e0e7929d52
-
Size
23KB
-
MD5
f8ddeea0b3d71b4a529847a3f5c8f284
-
SHA1
35342d1030bd88864f09917a33a4b7233b807bdf
-
SHA256
b637cd0693c0c9f6241d97deeb3ce51d0570edbfd9007a578d4472e0e7929d52
-
SHA512
e72f6792b1337ff061fdcf7329bd52787e10c397e55ef289169dbf4760b9dc0d620a819a5c81f67d24a24c2639acfb4fb7f85a4712ff790a5eeb864198d0fe55
-
SSDEEP
384:Qgg/b3pCvr0V0SGu3eJOs29Hc98g5b6taMfFXNIM5P60ez0mxSLTUYbowHMPm:uFtJeCgr4tjhNr54TxgJs
Malware Config
Signatures
Files
-
b637cd0693c0c9f6241d97deeb3ce51d0570edbfd9007a578d4472e0e7929d52.exe windows x86
bc72942edbdb9b6ec85fd1b75a9b05cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cmdial32
AutoDialFunc
kernel32
InitializeCriticalSection
GetCurrentThreadId
DisableThreadLibraryCalls
FatalAppExitA
LCMapStringA
VirtualAlloc
TerminateProcess
GetStartupInfoA
GetShortPathNameA
SetLastError
UnhandledExceptionFilter
FindResourceA
lstrcpynA
GetEnvironmentStrings
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
TlsGetValue
HeapReAlloc
GetModuleFileNameA
GetFileType
LoadLibraryExA
SetUnhandledExceptionFilter
IsDBCSLeadByte
IsBadCodePtr
MultiByteToWideChar
VirtualFree
InterlockedDecrement
GetACP
HeapFree
GetStdHandle
GetStringTypeA
lstrlenA
GetProcAddress
IsBadReadPtr
SetConsoleCtrlHandler
GetCommandLineA
SetHandleCount
SizeofResource
FreeLibrary
GetCurrentThread
GetModuleHandleA
GetOEMCP
LoadResource
EnterCriticalSection
LCMapStringW
DeleteCriticalSection
WideCharToMultiByte
GetLastError
HeapCreate
GetEnvironmentStringsW
GetVersion
GetCurrentProcess
InterlockedIncrement
WriteFile
LeaveCriticalSection
lstrcpyA
IsBadWritePtr
TlsAlloc
LoadLibraryA
GetCPInfo
RtlUnwind
lstrcatA
HeapAlloc
lstrcmpiA
TlsFree
lstrlenW
TlsSetValue
ExitProcess
HeapDestroy
adsnt
DllGetClassObject
dataclen
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ