Static task
static1
Behavioral task
behavioral1
Sample
b00b1918b202c071f90dd94ff1cd7148481d7eb84f834ff53f374cc049e1d93b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b00b1918b202c071f90dd94ff1cd7148481d7eb84f834ff53f374cc049e1d93b.exe
Resource
win10v2004-20220901-en
General
-
Target
b00b1918b202c071f90dd94ff1cd7148481d7eb84f834ff53f374cc049e1d93b
-
Size
368KB
-
MD5
69fdcd4c7b3cc5d31458bc922ab1de0a
-
SHA1
c4e11d11312a6ab4baed0b96a254d420a030d216
-
SHA256
b00b1918b202c071f90dd94ff1cd7148481d7eb84f834ff53f374cc049e1d93b
-
SHA512
f7323b43cfa32eaf7f714d71a709449d07f08a7fbdb954cef4231dace8291fd574467b74be994edfbb86028602b4f5123c248e842f0a5dfcf915ab55278968ca
-
SSDEEP
6144:3vByRMghrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:3vERMGrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
b00b1918b202c071f90dd94ff1cd7148481d7eb84f834ff53f374cc049e1d93b.exe windows x86
c18b8156c7daeddce13b5f20927ec250
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
SetEvent
ReadFile
TlsGetValue
ResumeThread
GetNumberFormatW
FindClose
GetCurrentProcessId
EnterCriticalSection
CreateEventW
GetModuleHandleA
GetPrivateProfileStringA
FindAtomW
GetConsoleAliasW
HeapCreate
SetLastError
lstrlenW
GetCurrentThreadId
GetDriveTypeW
LocalFree
user32
DispatchMessageA
GetKeyboardType
GetKeyState
GetCursorInfo
GetClientRect
GetSysColor
DispatchMessageA
GetClassInfoA
IsWindow
GetMenuInfo
DrawTextA
CallWindowProcW
SetFocus
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ