Static task
static1
Behavioral task
behavioral1
Sample
b3cdc0ca11794b7db14a378d2191840d2640ea00b98e81c84700b8e3f5215ccb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3cdc0ca11794b7db14a378d2191840d2640ea00b98e81c84700b8e3f5215ccb.exe
Resource
win10v2004-20220901-en
General
-
Target
b3cdc0ca11794b7db14a378d2191840d2640ea00b98e81c84700b8e3f5215ccb
-
Size
145KB
-
MD5
8a77fa9f19a820621c6cf772c1988f39
-
SHA1
1455113f9a129d2e76be31e361d7e0664da9c9ec
-
SHA256
b3cdc0ca11794b7db14a378d2191840d2640ea00b98e81c84700b8e3f5215ccb
-
SHA512
2484374227fe435be219c1c59f8042bcc37ea2307772577ab1fba846274425fbb90a967a58744c62447c57a34efa88d2dc7f86a478d8c90dfebc3987c25a87ab
-
SSDEEP
3072:bx8789d8lNt57Hcnr4nUrEPs+zBXtbIZEPyv8KTv:O7t8nrjWJzVuzkIv
Malware Config
Signatures
Files
-
b3cdc0ca11794b7db14a378d2191840d2640ea00b98e81c84700b8e3f5215ccb.exe windows x86
7fa6d993b79b7770061bfc6221752d15
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetModuleFileNameA
GetCurrentProcess
VirtualFree
GetACP
GetACP
VirtualFree
GetModuleHandleW
VirtualFree
GetCurrentProcess
GetTickCount
GetModuleHandleA
GetCurrentProcessId
FindResourceA
GetModuleHandleA
GetProcessHeap
SetUnhandledExceptionFilter
GetModuleHandleW
GetModuleHandleA
GetCommandLineA
GetModuleHandleA
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentThreadId
GetProcessHeap
GetModuleHandleW
GetACP
GetCommandLineW
ntdll
NtAllocateVirtualMemory
user32
EndPaint
LoadImageW
CheckDlgButton
GetSystemMenu
SetWindowPos
CheckDlgButton
MoveWindow
DialogBoxParamW
GetMenu
KillTimer
MoveWindow
PostMessageW
GetDlgCtrlID
GetMessageW
SetWindowPos
SendDlgItemMessageW
GetDlgCtrlID
EnableMenuItem
BeginPaint
DialogBoxParamW
LoadImageW
GetCursorPos
CheckDlgButton
IsDlgButtonChecked
EndPaint
GetSysColor
GetMessageW
BeginPaint
SetWindowPos
SendDlgItemMessageW
GetMessageW
KillTimer
EndPaint
GetSystemMenu
CheckDlgButton
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ