Static task
static1
Behavioral task
behavioral1
Sample
b1368941031210da475df6b1ce02c506cfd6d4ae006148e61582538688e48748.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1368941031210da475df6b1ce02c506cfd6d4ae006148e61582538688e48748.exe
Resource
win10v2004-20220812-en
General
-
Target
b1368941031210da475df6b1ce02c506cfd6d4ae006148e61582538688e48748
-
Size
308KB
-
MD5
8e72b52c1df44d037ca7a4c3a839e79d
-
SHA1
13592b186944a10955a839de436642037a694d1b
-
SHA256
b1368941031210da475df6b1ce02c506cfd6d4ae006148e61582538688e48748
-
SHA512
e76326fbe49e89fa6fc68c34bc36662304f3a2601c28250d025ea29146d1a7b2c53d46186d5a10d09116851f459c18afc90b127a6fe887bd928ee19b5431061f
-
SSDEEP
6144:gBc5uHNLIc4jMglfmRN+naYc72v/Na72Hh93aVI:jvjMglfFaYci11LaW
Malware Config
Signatures
Files
-
b1368941031210da475df6b1ce02c506cfd6d4ae006148e61582538688e48748.exe windows x86
cfe73124486bdb3b9a70911d99e1e572
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
GlobalFindAtomA
CreateMutexA
FreeEnvironmentStringsA
OpenMutexA
GetTickCount
GetFileAttributesExA
UnhandledExceptionFilter
PeekConsoleInputW
WritePrivateProfileSectionA
LocalSize
GetSystemInfo
MoveFileW
GenerateConsoleCtrlEvent
SetEvent
GlobalFree
GetPrivateProfileSectionW
SetConsoleOutputCP
EnumSystemCodePagesW
ReadConsoleOutputA
DebugBreak
CreateMutexW
PrepareTape
GetACP
ExitProcess
comdlg32
GetOpenFileNameW
ReplaceTextA
user32
ModifyMenuW
SetLastErrorEx
BroadcastSystemMessageW
WaitMessage
GetMenuItemRect
DrawTextA
FrameRect
ScrollDC
PostMessageW
RegisterWindowMessageW
OpenWindowStationA
ShowCursor
MonitorFromWindow
SetDlgItemTextW
DrawIconEx
GetMessagePos
DialogBoxParamA
GetCaretBlinkTime
SendMessageCallbackW
ChangeDisplaySettingsW
LoadMenuA
GetDoubleClickTime
IsWindowUnicode
ValidateRect
GetTabbedTextExtentW
CopyAcceleratorTableA
TranslateAcceleratorW
SetCapture
comctl32
CreatePropertySheetPageA
ImageList_GetBkColor
msvcrt
_snprintf
ftell
_wremove
_isatty
_mbschr
fgetwc
_wsystem
_wpopen
fopen
_wfopen
_splitpath
_wcsnicmp
_ui64tow
_ismbcdigit
_wsopen
_mbsrchr
iswprint
srand
fgetc
_beginthread
_mbsstr
Sections
.text Size: 12KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ