Static task
static1
Behavioral task
behavioral1
Sample
b125765dc05a54de60322902dcc45c638082019357005078669e30ab556550e0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b125765dc05a54de60322902dcc45c638082019357005078669e30ab556550e0.exe
Resource
win10v2004-20221111-en
General
-
Target
b125765dc05a54de60322902dcc45c638082019357005078669e30ab556550e0
-
Size
284KB
-
MD5
0cd415a3a23c5c723b218c2d6c8c113f
-
SHA1
cd32ac23361a0ab059750b5b495f9922c9a23ba3
-
SHA256
b125765dc05a54de60322902dcc45c638082019357005078669e30ab556550e0
-
SHA512
459e8a526a1a260421b3b3a455a16867470e830efd7e72446ee718574a4a923c7e460336a1f5f77533034593520fcf732ab5ad79a52ce3cd45a82781d6cee72c
-
SSDEEP
6144:G6EBO4rEx6Akrkx7LASoXeYW1Ifq7o3JUO/rSd/8ox5vBSk:G6EoN6Atx7IKIMo3mO/rSd55Z
Malware Config
Signatures
Files
-
b125765dc05a54de60322902dcc45c638082019357005078669e30ab556550e0.exe windows x86
4068e2d812eaa9478fad5d4778eb7b30
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
VirtualAlloc
VirtualFree
OpenEventW
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
oleaut32
OleSavePictureFile
OleCreatePropertyFrame
SafeArraySetRecordInfo
SysReAllocStringLen
OleLoadPictureFileEx
CreateTypeLib
OleLoadPictureFile
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 180KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ