Static task
static1
Behavioral task
behavioral1
Sample
b1d74fc781373c7adfcd4319fee9c4740949fe1c6f16b8b0bddb2b838fa520b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1d74fc781373c7adfcd4319fee9c4740949fe1c6f16b8b0bddb2b838fa520b9.exe
Resource
win10v2004-20220812-en
General
-
Target
b1d74fc781373c7adfcd4319fee9c4740949fe1c6f16b8b0bddb2b838fa520b9
-
Size
113KB
-
MD5
e62a01add51810eb681a0efbd5e89f30
-
SHA1
1a5701da946af5f7ca5b9642393b3c2dd2bfb4fe
-
SHA256
b1d74fc781373c7adfcd4319fee9c4740949fe1c6f16b8b0bddb2b838fa520b9
-
SHA512
83a53a9e1073aa9f7abdb7554d89f05c28e2bfcc58d9fc6096c0f91c99abe3e5d129eb27ff9224a9ca520eea499ef55e49aba30627161a72222aea3554062b3e
-
SSDEEP
3072:meDFfZEuvjx+m2aWHyc2n9ZxCIHtsOp9e1sXOJ2Om:bBfZ59XeHyd9SINsMAsOJ2Om
Malware Config
Signatures
Files
-
b1d74fc781373c7adfcd4319fee9c4740949fe1c6f16b8b0bddb2b838fa520b9.exe windows x86
a317477754172db1655a55cb405fb8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
QueryPerformanceCounter
ExitProcess
GetVersion
ReadFile
QueryPerformanceFrequency
SetProcessAffinityMask
GetProcAddress
GetLocalTime
DeleteFileA
CloseHandle
GetModuleHandleA
GetThreadPriority
ReleaseMutex
Sleep
InterlockedIncrement
VirtualAllocEx
ole32
DoDragDrop
gdi32
GetBkColor
SetTextColor
GetStockObject
SetBkColor
ntdll
ZwSetTimer
ZwQuerySystemInformation
ZwQueryPortInformationProcess
ZwQueryPerformanceCounter
ZwQueryMutant
NtSetTimer
ZwClose
ZwQuerySystemEnvironmentValue
ZwCreateSemaphore
LdrLoadDll
advapi32
RegQueryValueExA
clbcatq
SetupOpen
GetSimpleTableDispenser
InprocServer32FromString
OpenComponentLibraryOnMemEx
OpenComponentLibraryOnStreamEx
UpdateFromComponentChange
user32
ShowCaret
SetFocus
GetCursorPos
DrawFocusRect
EnableWindow
wsprintfA
DestroyCaret
GetSystemMetrics
IsIconic
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ