Static task
static1
Behavioral task
behavioral1
Sample
b1b9c87cdd401299335da892dc3d34f657ebfc4ce6b247f75606c37af15c464b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1b9c87cdd401299335da892dc3d34f657ebfc4ce6b247f75606c37af15c464b.exe
Resource
win10v2004-20221111-en
General
-
Target
b1b9c87cdd401299335da892dc3d34f657ebfc4ce6b247f75606c37af15c464b
-
Size
1.3MB
-
MD5
501bc251fa68250680ffa8d85c665e3e
-
SHA1
fa3b75b13c33255422fed50f8c9a65a09a06181d
-
SHA256
b1b9c87cdd401299335da892dc3d34f657ebfc4ce6b247f75606c37af15c464b
-
SHA512
963502688257305cd173f63341087f318fb19bc498e4a80e8200cddd7bba8168b97774b443b17dc779354f71dd1a517f269d22a4512ee267ce110012f47fa70f
-
SSDEEP
24576:EWEFaZ08AyS+uKsZRUTZiYTh4RnCeNVgZfc3nqHKM89FvNCao1:EhFaXAuu97CiKhnCVgZfyyK99HTU
Malware Config
Signatures
Files
-
b1b9c87cdd401299335da892dc3d34f657ebfc4ce6b247f75606c37af15c464b.exe windows x86
da3d36e90028f11c3f6f404c0deb46a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
FindNextVolumeA
GetFileTime
AddAtomA
GetComputerNameA
ReadFile
ReadConsoleW
Sleep
GetConsoleMode
CreateDirectoryA
CopyFileW
GetStdHandle
CloseHandle
GetFileSize
CreateMutexW
GetConsoleMode
CopyFileExW
ReadConsoleW
WriteFile
CreateDirectoryA
CopyFileA
DeleteFileW
CloseHandle
FindNextVolumeA
GetStdHandle
ExitProcess
DeleteFileA
CreateMutexA
FindResourceW
FindFirstFileA
GetFileSize
CreateMutexW
CopyFileW
ReadConsoleW
CreateFileA
FindNextVolumeA
CopyFileA
OpenFileMappingA
FindFirstFileA
FindResourceA
CopyFileExW
GetStdHandle
WriteFile
ReadFile
ReadConsoleW
CloseHandle
AddAtomA
GetFileSize
CreateDirectoryA
GetComputerNameA
CopyFileA
Sleep
FindFirstFileA
GlobalFree
CreateMutexA
CopyFileW
FindNextVolumeA
DeleteFileW
ReadFile
GetStdHandle
Sections
.DATA Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 127B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ