Static task
static1
Behavioral task
behavioral1
Sample
b76ebce8bea3b274a6a9080e0c148b8409ce11ea7ef12552fa4914fdabf42f89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b76ebce8bea3b274a6a9080e0c148b8409ce11ea7ef12552fa4914fdabf42f89.exe
Resource
win10v2004-20220901-en
General
-
Target
b76ebce8bea3b274a6a9080e0c148b8409ce11ea7ef12552fa4914fdabf42f89
-
Size
17KB
-
MD5
105d6237dbfc65473c95dc43ae103d50
-
SHA1
6893b60daafc8971f5600bbd6875be8f67024c21
-
SHA256
b76ebce8bea3b274a6a9080e0c148b8409ce11ea7ef12552fa4914fdabf42f89
-
SHA512
e5dbc9ae24615a45583bf47197ef5159c508ebe148bb18fac5913f8eef58a9b5d00c0fd2bbc4e52c9e6be8e227adfc53849e1661326d48a7f9c223066d6df882
-
SSDEEP
384:B43ONJ9Ga9HP6KSlqcmWN+8zuEc4aHVI2gEHs:Ge0EP6vlPf7cXm2vs
Malware Config
Signatures
Files
-
b76ebce8bea3b274a6a9080e0c148b8409ce11ea7ef12552fa4914fdabf42f89.exe windows x86
b029ded94fecb3f5f44b3058e2f0de10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
SetUnhandledExceptionFilter
lstrcatA
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
CreateFileA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
ExitProcess
user32
TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx
comdlg32
PrintDlgW
GetOpenFileNameW
FindTextW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ