Static task
static1
Behavioral task
behavioral1
Sample
b10b35dfe742da599681836de4cd2676ebbd13aac5fbc756bad7dd6668d3ebaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b10b35dfe742da599681836de4cd2676ebbd13aac5fbc756bad7dd6668d3ebaf.exe
Resource
win10v2004-20221111-en
General
-
Target
b10b35dfe742da599681836de4cd2676ebbd13aac5fbc756bad7dd6668d3ebaf
-
Size
327KB
-
MD5
ef435e93719bd1dbd53c67312f4e7dcc
-
SHA1
1c546b4ca599e6e0cf02dbd9e6516f8e2e8cb4ab
-
SHA256
b10b35dfe742da599681836de4cd2676ebbd13aac5fbc756bad7dd6668d3ebaf
-
SHA512
1cf9ae72a3be9a81972d6e1d8271b97913ea45352e380fe0beb8cfb66dfd18b9bb3e2d792eb9a4c9daa07e233be96dbbb6a27b84b88bda881834a458f08a3c16
-
SSDEEP
6144:HQmBxcsxwuJfGzxDS7R+Yno1QHmBXfEruLj3fVAzb3LhZ0fgVCiz:xYzEd9nfGs+bfViPEI
Malware Config
Signatures
Files
-
b10b35dfe742da599681836de4cd2676ebbd13aac5fbc756bad7dd6668d3ebaf.exe windows x86
b2f3cfd602bc0275846c03b6d2ffceff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
TlsGetValue
IsBadReadPtr
GetModuleHandleA
GetDriveTypeW
IsBadStringPtrA
EnumResourceTypesA
CancelIo
CloseHandle
SetLastError
GetLastError
GetDiskFreeSpaceExA
GetDateFormatA
DeleteCriticalSection
GetCommandLineA
ResetEvent
FreeConsole
VirtualProtect
LocalFree
LoadLibraryExW
advapi32
OpenEventLogA
AccessCheck
CloseTrace
IsValidSid
RegCreateKeyExA
CloseEventLog
RegCloseKey
GetFileSecurityA
LsaClose
LsaSetSecret
FreeSid
RegLoadKeyA
LsaFreeMemory
RegCloseKey
osuninst
ProvideUiAlerts
ExecuteUninstall
GetUninstallImageSize
IsUninstallImageValid
RemoveUninstallImage
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ