Static task
static1
Behavioral task
behavioral1
Sample
b11bf4550bfa297fd2b2ee7e554323808eef3ce2ee7bceca11d61a1618f5a04f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b11bf4550bfa297fd2b2ee7e554323808eef3ce2ee7bceca11d61a1618f5a04f.exe
Resource
win10v2004-20220812-en
General
-
Target
b11bf4550bfa297fd2b2ee7e554323808eef3ce2ee7bceca11d61a1618f5a04f
-
Size
1.3MB
-
MD5
f19da7ae375a414349944b6e511028ad
-
SHA1
978453c66fb51fcfd78818f29b27fa4cb480207f
-
SHA256
b11bf4550bfa297fd2b2ee7e554323808eef3ce2ee7bceca11d61a1618f5a04f
-
SHA512
991efb9a066b626d9513d9e343d27227104d8d4d51f55e378f53be19c0186c32df957b5cb1f44614d1fbdb9a1bff7f6e713e9ae40e0bcd60675bddb29eb2b992
-
SSDEEP
24576:F0jX30a+oaIF/MDb76OmcR0zRuo1Be4rjUCao8T:F0jX30XHIF0DTmcR0zRuoHsC4
Malware Config
Signatures
Files
-
b11bf4550bfa297fd2b2ee7e554323808eef3ce2ee7bceca11d61a1618f5a04f.exe windows x86
e10cbd6f2ef43ffc54ec20ddf2deaac6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
CreateMutexW
GlobalFree
OpenFileMappingA
ReadConsoleW
CreateFileA
GetFileTime
OpenFile
DeleteFileW
CreateMutexA
ReadFile
GetStdHandle
FindResourceW
CopyFileA
FindResourceA
GetComputerNameA
AddAtomA
DeleteFileA
ExitThread
GetStdHandle
ReadFile
WriteFile
OpenFile
GetFileSize
CopyFileA
CreateMutexW
ReadConsoleA
CreateProcessA
GetFileTime
DeleteFileW
GetFileSize
GetFileTime
CreateFileA
CopyFileA
CopyFileExA
GetStdHandle
FindFirstFileA
ReadFile
CopyFileW
CreateThread
CopyFileExW
GetComputerNameA
CopyFileW
ReadFile
DeleteFileW
OpenFileMappingA
CopyFileA
GetFileSize
DeleteFileA
GetStdHandle
OpenFile
CopyFileExA
ExitThread
CreateDirectoryA
AddAtomA
GlobalFree
FindResourceW
ReadConsoleA
FindResourceA
AddAtomA
FindFirstFileA
GlobalFree
CreateDirectoryA
ReadConsoleA
GetFileSize
ExitThread
CreateMutexW
WriteFile
OpenFile
CreateProcessA
ReadConsoleW
GlobalFree
FindFirstFileA
GetStdHandle
OpenFileMappingA
GetFileSize
CopyFileExA
CreateFileA
CopyFileA
CreateProcessA
DeleteFileW
CreateMutexW
ReadFile
DeleteFileA
ReadConsoleW
Sections
.bbs Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 24KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ