Static task
static1
Behavioral task
behavioral1
Sample
b84423b21eb31c7965b304cdccb0154985cc1607ac030b20446833365efaed74.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b84423b21eb31c7965b304cdccb0154985cc1607ac030b20446833365efaed74.exe
Resource
win10v2004-20221111-en
General
-
Target
b84423b21eb31c7965b304cdccb0154985cc1607ac030b20446833365efaed74
-
Size
636KB
-
MD5
ff3845f2870ad2994352387ae541e79d
-
SHA1
0e8d8fb1ed647942801c7a72a6ed7301f4d2a7c9
-
SHA256
b84423b21eb31c7965b304cdccb0154985cc1607ac030b20446833365efaed74
-
SHA512
94dd1658d21b2c85009d2ce8ee39e6d5f83a97945ab62c3829da1a85bd54ffb86124650186b105fa58461d98fa0ffcfd89a4f1ae3e17f98e9c220406813b1580
-
SSDEEP
12288:Jp1Nfjk1bsLb7LfmkqOUBRZvfCHXYCImAV7xdBiNtbcl+V50ES:Jp7AtsLb7zmk2B7cDAxxOjTV5Q
Malware Config
Signatures
Files
-
b84423b21eb31c7965b304cdccb0154985cc1607ac030b20446833365efaed74.exe windows x86
da36aa681ac09ae8f00f44592c2ddfc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapQueryInformation
GetTimeFormatA
HeapDestroy
GetCurrentProcessId
LoadLibraryExA
CreateIoCompletionPort
VirtualProtect
IsDebuggerPresent
GetModuleHandleA
GetStdHandle
GetProcessVersion
GlobalMemoryStatus
WaitForSingleObject
InterlockedExchange
GetTapeStatus
GetLogicalDrives
GetCurrentThread
HeapCreate
GetACP
GetEnvironmentStringsA
user32
GetFocus
GetWindow
ShowWindow
wsprintfA
BeginPaint
FillRect
GetTitleBarInfo
GetClassNameA
ReleaseDC
GetParent
DrawTextA
SetForegroundWindow
GetCursorPos
SetActiveWindow
GetDlgItem
DragDetect
GetWindowTextLengthA
EndPaint
FrameRect
gdi32
CloseFigure
GetLayout
CreatePalette
CreateBitmap
GetClipBox
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ