Static task
static1
Behavioral task
behavioral1
Sample
b08814d08aa7a0c8e34e8840a3529a4e51acfa8a71ebb297c73cd413cc3d0db1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b08814d08aa7a0c8e34e8840a3529a4e51acfa8a71ebb297c73cd413cc3d0db1.exe
Resource
win10v2004-20220812-en
General
-
Target
b08814d08aa7a0c8e34e8840a3529a4e51acfa8a71ebb297c73cd413cc3d0db1
-
Size
96KB
-
MD5
0e66d58de2fdac7f18d65ddb16d2ab50
-
SHA1
ec547e071888a0a143899504b725b60579daf62d
-
SHA256
b08814d08aa7a0c8e34e8840a3529a4e51acfa8a71ebb297c73cd413cc3d0db1
-
SHA512
eb46a281da0bad217caf73c7c20067d9d665f509e04ade070f1e4ae53583a2454cf52a3abde6aecf60808cb5c590e06d778f432edbc48d3bc7c0a4e46b51040f
-
SSDEEP
1536:S0z7tmlyMgZlH7qs3NwdeFykP9HuWVpqXStuk4TSZAkBe64ni2hBQqfOUbZ4mILG:SImiXH7q2b8K9HhSitJAxoe6MqNUbZfZ
Malware Config
Signatures
Files
-
b08814d08aa7a0c8e34e8840a3529a4e51acfa8a71ebb297c73cd413cc3d0db1.exe windows x86
163d4ccf35eb1cfc926c4d6ef8cf3423
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
WriteFile
CreateWaitableTimerW
SetCurrentDirectoryW
LockResource
GlobalDeleteAtom
GetDriveTypeW
lstrcpyW
GlobalFree
GetProcAddress
CreateFileW
FindResourceW
GetModuleFileNameW
SetWaitableTimer
ReadProcessMemory
FileTimeToSystemTime
FindNextFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetVersion
CreateEventW
MoveFileW
GlobalLock
GetCurrentThreadId
LoadLibraryA
GetLogicalDrives
user32
RegisterWindowMessageW
GetWindowThreadProcessId
PostThreadMessageW
SetWindowPos
SystemParametersInfoW
DefWindowProcW
SetCursorPos
FillRect
LoadStringW
DestroyIcon
SetCursor
GetWindowDC
GetCursorPos
ReleaseCapture
SetCapture
EnableWindow
IsDlgButtonChecked
OffsetRect
gdi32
CreateBitmap
BitBlt
StretchBlt
GetClipBox
CreateCompatibleBitmap
GetMapMode
SetBkMode
advapi32
RegSetValueExW
LookupAccountSidW
StartServiceW
Sections
.tqrps Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.njafx Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.einl Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE