Static task
static1
Behavioral task
behavioral1
Sample
b1cc99d5bfa4ecf1011c9fbe238cefb57cc0a17800fffcc7303b8f6edcbdbae0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1cc99d5bfa4ecf1011c9fbe238cefb57cc0a17800fffcc7303b8f6edcbdbae0.exe
Resource
win10v2004-20220812-en
General
-
Target
b1cc99d5bfa4ecf1011c9fbe238cefb57cc0a17800fffcc7303b8f6edcbdbae0
-
Size
40KB
-
MD5
4555bb43fba8eb1324754f7605b28e4e
-
SHA1
a25496cbba85d7c75e2d39ee664617493e7b355f
-
SHA256
b1cc99d5bfa4ecf1011c9fbe238cefb57cc0a17800fffcc7303b8f6edcbdbae0
-
SHA512
668c948ab0e6dfae982f484fafde4a6568bfc76f86809bc0c0d08717807de14b293242cdfd5a77ba5951a9ec09d87e7add95191c58e93543bba2000b033f3cad
-
SSDEEP
384:XXD/kBUnIyTDqSeJooZAy1Vt9Zcv5OpHVmlDSeappy5cEND7yrhIKnwHdaUpfS7Z:n7kBWIADq9PZXQ5OpHpwcENDmIKPO
Malware Config
Signatures
Files
-
b1cc99d5bfa4ecf1011c9fbe238cefb57cc0a17800fffcc7303b8f6edcbdbae0.exe windows x86
2e8ec6596e481e851165e7943df52fe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetLastError
SetFilePointer
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
SetEndOfFile
LCMapStringA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetOEMCP
HeapReAlloc
GetCPInfo
CreateFileA
GetACP
FlushFileBuffers
SetStdHandle
CloseHandle
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStrings
ReadFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualFree
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
user32
EndDialog
DrawTextA
BeginPaint
GetClientRect
DestroyWindow
EndPaint
DefWindowProcA
CreateWindowExA
DialogBoxParamA
PostQuitMessage
UpdateWindow
SetTimer
ShowWindow
RegisterClassExA
LoadIconA
LoadCursorA
GetMessageA
LoadStringA
LoadAcceleratorsA
DispatchMessageA
TranslateAcceleratorA
TranslateMessage
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE