Static task
static1
Behavioral task
behavioral1
Sample
b513ac87cf65d971feb234e88033ac72c16d8fba6433bf0b62a7e631e87be868.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b513ac87cf65d971feb234e88033ac72c16d8fba6433bf0b62a7e631e87be868.exe
Resource
win10v2004-20221111-en
General
-
Target
b513ac87cf65d971feb234e88033ac72c16d8fba6433bf0b62a7e631e87be868
-
Size
308KB
-
MD5
2b03d8efa12d9cb39e6d5fc252a89bdd
-
SHA1
43da2147a495d3fdb780b2ca7393f7bd86594518
-
SHA256
b513ac87cf65d971feb234e88033ac72c16d8fba6433bf0b62a7e631e87be868
-
SHA512
6d3faafc37d7c7a041646107bfbc375796e5c8488de58f162685714d0aa3df618054359776b442798dab5bbb280fed2dc8d5f92401133a66fc31e411c0a761c4
-
SSDEEP
6144:Oz7fge2RHOVl/K47+/Eyj6Bz/UVyL24TbWvY3lh2lOLm8LSvCCYKl5:2b2RH4dDeWdkyq43KKl0ELfOHl
Malware Config
Signatures
Files
-
b513ac87cf65d971feb234e88033ac72c16d8fba6433bf0b62a7e631e87be868.exe windows x86
443c4f7d4455bda8fa32dae28d7c1ac1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetFileSize
ReadFile
HeapCreate
CreatePipe
InitializeCriticalSection
IsBadWritePtr
SetFileTime
CloseHandle
LeaveCriticalSection
SetFileTime
lstrcatA
GetStartupInfoW
GetLastError
GetExitCodeProcess
LoadLibraryA
SetFileTime
FormatMessageW
lstrcpyA
FindResourceW
CreateMutexW
mstscax
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
user32
PeekMessageW
IsWindow
MessageBoxA
SetFocus
GetWindowTextA
GetWindowRect
PostMessageA
PostMessageW
GetWindowLongW
wsprintfA
LoadCursorW
DispatchMessageA
IsDialogMessageA
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE