Static task
static1
Behavioral task
behavioral1
Sample
b383d2388152cacdddacf7385c5487912921fd6434260bc72ae87ec8574cfc6e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b383d2388152cacdddacf7385c5487912921fd6434260bc72ae87ec8574cfc6e.exe
Resource
win10v2004-20220901-en
General
-
Target
b383d2388152cacdddacf7385c5487912921fd6434260bc72ae87ec8574cfc6e
-
Size
155KB
-
MD5
454deebb8b988e13b5337fafadc6488b
-
SHA1
9839dca5ecdc2c0802ce6e99fa53e3d72a8155ae
-
SHA256
b383d2388152cacdddacf7385c5487912921fd6434260bc72ae87ec8574cfc6e
-
SHA512
5b47f7140076f67476ec9ed05f62047f1ef7b0e967b44ecfff23df6fc881cc565cd1bbb019a1f46c70783881514128dae807badb61732539f24c7fa1b1528595
-
SSDEEP
3072:EaJY5tBp/RFsol2t25EY15i9ubSPyuZM7W7:9gl2t25Ev98SKuX7
Malware Config
Signatures
Files
-
b383d2388152cacdddacf7385c5487912921fd6434260bc72ae87ec8574cfc6e.exe windows x86
e434c5d28be2d0464d09c2e01a3d03a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
CopyFileExW
GlobalFree
OpenFileMappingA
ReadConsoleA
WriteFile
CopyFileExA
GetCPInfo
GetCommandLineA
FindFirstFileA
ExitThread
DeleteAtom
OpenFile
CreateProcessA
GetStdHandle
DeleteFileW
ReadConsoleA
ReadConsoleW
GetLastError
GetFileTime
FindFirstFileA
CopyFileExA
ReadFile
GetCPInfo
CopyFileW
GetComputerNameA
Sleep
CreateDirectoryA
FindAtomA
DeleteFileA
GetCommandLineA
GetStdHandle
CreateProcessA
DeleteAtom
DeleteFileA
GetFileTime
CopyFileW
ReadConsoleA
CreateProcessA
WriteFile
GetFileSize
DeleteFileW
FindFirstFileA
OpenFile
CopyFileA
ReadConsoleW
CreateDirectoryA
CopyFileW
CopyFileExA
FindAtomA
GetFileTime
ReadConsoleA
GetLastError
DeleteFileW
OpenFile
GetConsoleMode
ReadConsoleW
ExitThread
CopyFileA
GetCPInfo
OpenFileMappingA
ExitThread
DeleteFileA
GetLastError
CreateDirectoryA
GetFileTime
ReadConsoleA
ReadConsoleW
FindAtomA
FindFirstFileA
GetStdHandle
CopyFileW
GlobalFree
CopyFileExA
GetComputerNameA
CopyFileExW
GetCommandLineA
CreateThread
Sections
.init Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ