Static task
static1
Behavioral task
behavioral1
Sample
b2ac311225d1b05c506919a93c9d270773504eaad81361671ccd2a781ef8bff9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2ac311225d1b05c506919a93c9d270773504eaad81361671ccd2a781ef8bff9.exe
Resource
win10v2004-20220812-en
General
-
Target
b2ac311225d1b05c506919a93c9d270773504eaad81361671ccd2a781ef8bff9
-
Size
24KB
-
MD5
22acc6aad03a5a523c0d6098a31d37fc
-
SHA1
efd90d7024f9cace3fe1606f47680ccc938eb0e7
-
SHA256
b2ac311225d1b05c506919a93c9d270773504eaad81361671ccd2a781ef8bff9
-
SHA512
9fcb9401d38c100910462aa7b67eac27af6c25e1694f98e85f5fc3337484de64664cbd20292d2aa45c4e31015db7a9f71b73bbcc728ad614fca6fbf21bf27e66
-
SSDEEP
384:YZKA/xyBF4kLpWFZ1So4cs9PEPsrrnodkyC1:3AazpWFEcwsPcua1
Malware Config
Signatures
Files
-
b2ac311225d1b05c506919a93c9d270773504eaad81361671ccd2a781ef8bff9.exe windows x86
d2a92df290fcbfa2bbf4e904da90c8ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetModuleFileNameA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrcpynA
lstrcpyA
CloseHandle
GetModuleHandleA
GetCommandLineA
Sleep
FreeConsole
GetBinaryTypeA
GetLastError
SetLastError
GetCPInfo
UnlockFile
ExitProcess
LockFile
CreateFileA
DuplicateHandle
OutputDebugStringA
user32
MessageBoxA
GetProcessDefaultLayout
GetParent
GetQueueStatus
CreateMenu
KillTimer
gdi32
DeleteObject
comdlg32
ChooseFontA
ole32
CoInitialize
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE