Static task
static1
Behavioral task
behavioral1
Sample
b698b3bec3e55675a228d170be5f95247a0cea697644d1a46ccf5e5387a9a430.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b698b3bec3e55675a228d170be5f95247a0cea697644d1a46ccf5e5387a9a430.exe
Resource
win10v2004-20220901-en
General
-
Target
b698b3bec3e55675a228d170be5f95247a0cea697644d1a46ccf5e5387a9a430
-
Size
315KB
-
MD5
20ffefb607b96b113cb93441400ac68f
-
SHA1
c767bc874f60322e7b26e0c3e9613429333a5f4f
-
SHA256
b698b3bec3e55675a228d170be5f95247a0cea697644d1a46ccf5e5387a9a430
-
SHA512
14dc9d7a408116a5a3450abf2316fc819ee3087acd07f522033838097571c662bb5dfdb99c9587a3b0e9624404dda7212080f651a29196fbda8aa92f5842ee6d
-
SSDEEP
6144:ojY4G3BCmjD3hwDI+mbyZej5DLWO5fzPpPuLbRiLc/PsK:ojjCvD3hEI+cyWDZxzR2Hqch
Malware Config
Signatures
Files
-
b698b3bec3e55675a228d170be5f95247a0cea697644d1a46ccf5e5387a9a430.exe windows x86
8d32cc7fc9984a32463bf51e7d0b7c6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
IsBadCodePtr
VirtualAlloc
GetModuleHandleA
GlobalLock
GetLastError
VirtualFree
PulseEvent
ExitProcess
HeapFree
GetEnvironmentStrings
OpenMutexA
CloseHandle
GetFileAttributesA
GetPriorityClass
lstrcatA
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
user32
SendMessageA
GetTopWindow
shell32
DuplicateIcon
ole32
CoCreateInstance
CoInitialize
psapi
GetProcessMemoryInfo
msvfw32
ICClose
ICOpen
DrawDibStart
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE