Static task
static1
Behavioral task
behavioral1
Sample
b0e4fc2805f64bcbc871ca88163920700da63018fecb1d0e0e4eb808c918fc55.exe
Resource
win7-20220901-en
General
-
Target
b0e4fc2805f64bcbc871ca88163920700da63018fecb1d0e0e4eb808c918fc55
-
Size
325KB
-
MD5
176306f8de631fdf41ca66efeda2030e
-
SHA1
fcfeed3f149494634dd05af626376628b8832eb9
-
SHA256
b0e4fc2805f64bcbc871ca88163920700da63018fecb1d0e0e4eb808c918fc55
-
SHA512
be34e694086f524d83373029f508a80311e2a5c96f3ad2e30fbb769de42c294240694e4095ad63648775b2a30ae84b2c052fb6f35d46098a7e11464e7948c404
-
SSDEEP
6144:YjPTHZiFWIAl8Off93wwU/CqWQbfGac32ddh/cYO4om:YjLHZic8OQCq3bfRBThOpm
Malware Config
Signatures
Files
-
b0e4fc2805f64bcbc871ca88163920700da63018fecb1d0e0e4eb808c918fc55.exe windows x86
1d9239614bba522919217354a50ac3d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
ExitProcess
VirtualAlloc
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
GetProcAddress
HeapFree
GetLastError
GetTickCount
ReadFile
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
user32
DefWindowProcA
GetMessageA
TranslateMessage
PeekMessageA
SetCursorPos
ShowCursor
GetCursorPos
GetDC
UpdateWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
gdi32
SetTextColor
GetStockObject
TextOutA
SetBkMode
ddraw
DirectDrawCreateEx
dsound
ord1
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE