Static task
static1
Behavioral task
behavioral1
Sample
1b4bf7a1d562d905f72ec9569992ed30f687796c9b15a6b3c6f6db36cebca440.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1b4bf7a1d562d905f72ec9569992ed30f687796c9b15a6b3c6f6db36cebca440.exe
Resource
win10v2004-20220812-en
General
-
Target
1b4bf7a1d562d905f72ec9569992ed30f687796c9b15a6b3c6f6db36cebca440
-
Size
75KB
-
MD5
ee40afe68b99f019d5b5e78a13bc1aad
-
SHA1
7bcab5330977459d91ffb1e206d952f470a0530a
-
SHA256
1b4bf7a1d562d905f72ec9569992ed30f687796c9b15a6b3c6f6db36cebca440
-
SHA512
8436501337a528517bfd194d7b545b90581acc70cdbcc231146702b411a1745a8d371928b42f38770560b88262f148aec5420bca9d2350bd34d0805a0cb2ab6c
-
SSDEEP
1536:/weKwhWkiWLJDq5Gv/a0kc95xO0KcmtCG+XHyl/ZDDDDDDDDD:/vKAWkieJDqAvJ9C0KUIDDDDDDDDD
Malware Config
Signatures
Files
-
1b4bf7a1d562d905f72ec9569992ed30f687796c9b15a6b3c6f6db36cebca440.exe windows x86
9d475a53c47f16452548495961d69527
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
GetDriveTypeA
GetShortPathNameW
GetPrivateProfileIntA
GetTickCount
VirtualAllocEx
CreateEventA
lstrcatA
GetStringTypeA
GetVolumeInformationW
GetModuleHandleA
FindResourceW
lstrlenA
CreateSemaphoreW
WriteConsoleA
GetTimeFormatW
HeapFree
OpenEventA
GetDiskFreeSpaceA
msdart
mpRealloc
mpCalloc
mpFree
??1CLKRHashTable@@QAE@XZ
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ