Static task
static1
Behavioral task
behavioral1
Sample
b2f1445a4696ece89a3b77785a4d48837cd58ea4f5b5e8b1782649891c633772.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2f1445a4696ece89a3b77785a4d48837cd58ea4f5b5e8b1782649891c633772.exe
Resource
win10v2004-20220812-en
General
-
Target
b2f1445a4696ece89a3b77785a4d48837cd58ea4f5b5e8b1782649891c633772
-
Size
128KB
-
MD5
0cd1992b1fa9bbf1e61fd7e1b572aa00
-
SHA1
9ac63bf9f57b3c97a0dfad377a13896fa3d894d8
-
SHA256
b2f1445a4696ece89a3b77785a4d48837cd58ea4f5b5e8b1782649891c633772
-
SHA512
2fc703596b6ba98f3605cda9984e80698e2ca4ad1e8498f092c12a81d65185c3998e63e95969a8acada1089404eed96e0ff43e56de2cba58e79ebb3f2925907c
-
SSDEEP
3072:lsCOB9/RuGssI8nIp/GlpViGqpQt4vDYRZ9Wvm18qNRMF2t:lsC+/bkxp+3iPBv0RZgvmHnMY
Malware Config
Signatures
Files
-
b2f1445a4696ece89a3b77785a4d48837cd58ea4f5b5e8b1782649891c633772.exe windows x86
fedb5811f1c46cfe111a5d7facbe25de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
SleepEx
GetCurrentProcessId
WritePrivateProfileSectionW
GetLastError
VirtualAlloc
GetCurrentProcess
WritePrivateProfileSectionA
LockResource
SizeofResource
FindResourceA
WaitForSingleObject
QueryPerformanceCounter
GetTickCount
ExitProcess
WriteConsoleW
CreateFileW
TerminateProcess
WritePrivateProfileStringA
LoadResource
advapi32
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
LookupPrivilegeDisplayNameA
RegQueryValueExA
RegCloseKey
Sections
.textbss Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ