Static task
static1
Behavioral task
behavioral1
Sample
b964bcfcb4ffdbfa16bad9b12f9bc7e7e28098e82e32b7ec3273b115d4971aba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b964bcfcb4ffdbfa16bad9b12f9bc7e7e28098e82e32b7ec3273b115d4971aba.exe
Resource
win10v2004-20220901-en
General
-
Target
b964bcfcb4ffdbfa16bad9b12f9bc7e7e28098e82e32b7ec3273b115d4971aba
-
Size
36KB
-
MD5
5ff286ca162e76f591853c9c9ed28be7
-
SHA1
90ab97fcf1a8e78a5a38090c95a7f36ed6b1253c
-
SHA256
b964bcfcb4ffdbfa16bad9b12f9bc7e7e28098e82e32b7ec3273b115d4971aba
-
SHA512
229ceb4929b78b11f55aa88a27a97d8a5a138730d1fd493fc413b78cacf87d002d682da3b71f53046d4d65ef09d6d5029c79727ff4b67aa79bd0711701a06e5e
-
SSDEEP
384:5nQV3rI/p5FLNMFP+a+fQrubcRblUWPSm6f4yEQlu7NSm15QyidruXSkzyEcLMFa:5QV8/p7uFP+aWPATPH6fZEdMm5ziANM
Malware Config
Signatures
Files
-
b964bcfcb4ffdbfa16bad9b12f9bc7e7e28098e82e32b7ec3273b115d4971aba.exe windows x86
286b56f5b93e571f4d49d407fd6ed514
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetLastError
GetProcessHeap
GetCurrentProcessId
GetModuleHandleA
GetModuleFileNameA
InitializeCriticalSection
VirtualProtect
VirtualProtect
InterlockedDecrement
LoadLibraryA
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
VirtualProtect
DeleteCriticalSection
DeleteCriticalSection
LocalAlloc
lstrcmpiW
HeapFree
GetLastError
EnterCriticalSection
GetProcAddress
LocalFree
HeapDestroy
lstrlenA
CreateFileW
HeapAlloc
DeleteCriticalSection
lstrcmpiW
VirtualProtect
CreateThread
GetProcessHeap
GetProcessHeap
GetModuleHandleW
SetLastError
Sleep
lstrlenA
CreateEventW
GetProcAddress
GetModuleHandleA
GetProcessHeap
SetLastError
InterlockedDecrement
GetSystemTimeAsFileTime
VirtualProtect
GetCurrentProcess
lstrcmpiW
GetCurrentProcessId
GetTickCount
CreateEventW
DeleteCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcessId
LoadLibraryW
LoadLibraryA
FreeLibrary
SetLastError
CreateFileW
GetVersionExA
VirtualAlloc
InterlockedExchange
HeapFree
GetTickCount
user32
GetDesktopWindow
SendMessageW
PostQuitMessage
GetWindowRect
DialogBoxParamW
GetFocus
LoadIconW
ShowWindow
DispatchMessageW
PeekMessageW
GetClientRect
BeginPaint
SetCursor
GetSysColor
EndPaint
DefWindowProcW
SetTimer
MessageBoxW
SendDlgItemMessageW
PostQuitMessage
GetWindowRect
SetFocus
SetDlgItemTextW
ReleaseDC
TranslateMessage
SetFocus
SetCursor
SetDlgItemTextW
IsDlgButtonChecked
PostMessageW
EnableWindow
PostQuitMessage
GetWindowRect
SetDlgItemTextW
ReleaseDC
SetTimer
SendMessageW
BeginPaint
GetDlgItem
DialogBoxParamW
DialogBoxParamW
ShowWindow
DestroyWindow
GetFocus
SetDlgItemTextW
CreateWindowExW
SendDlgItemMessageW
GetDesktopWindow
IsDlgButtonChecked
EndDialog
MessageBoxW
IsDlgButtonChecked
wsprintfA
ShowWindow
PostMessageW
GetDlgItem
EndPaint
DefWindowProcW
EndDialog
CreateWindowExW
SendMessageW
SetDlgItemTextW
GetSystemMetrics
GetDlgItem
IsWindow
PostQuitMessage
ReleaseDC
GetFocus
SetForegroundWindow
Sections
.text Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ