Static task
static1
Behavioral task
behavioral1
Sample
b91cb3e4cf78b9e2ca45192d1ffa88d4f6f1a3aa36938694ae8525a9eaacc4ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b91cb3e4cf78b9e2ca45192d1ffa88d4f6f1a3aa36938694ae8525a9eaacc4ac.exe
Resource
win10v2004-20221111-en
General
-
Target
b91cb3e4cf78b9e2ca45192d1ffa88d4f6f1a3aa36938694ae8525a9eaacc4ac
-
Size
181KB
-
MD5
80aaf248683a7f3b38ad3c352f4dfe26
-
SHA1
be575ea2502140bbed3666b37e94c86fdf95e6d5
-
SHA256
b91cb3e4cf78b9e2ca45192d1ffa88d4f6f1a3aa36938694ae8525a9eaacc4ac
-
SHA512
254dcc8633757abe0ebbe6140d078f3a682cde514b1d2bb7f01047f5ceb08d8fb59e505c7a3a65d5023e048e11d3336e3ea6019daa68a138256029fcb508328c
-
SSDEEP
3072:Wrkob8LjUbb5d6ugAa4PgbfszVrOzcPhbyind:Wzb8vU76AgbfCVrpP1d
Malware Config
Signatures
Files
-
b91cb3e4cf78b9e2ca45192d1ffa88d4f6f1a3aa36938694ae8525a9eaacc4ac.exe windows x86
eeb68b92550752a47ea11185f4ecc60f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
CloseHandle
WaitForSingleObject
Sleep
EnterCriticalSection
CreateEventW
GetCurrentThreadId
SetEvent
GetCommandLineW
LCMapStringW
LCMapStringA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CreateThread
lstrlenW
GetStringTypeA
WideCharToMultiByte
IsValidCodePage
GetOEMCP
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCPInfo
FreeEnvironmentStringsA
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetProcessHeap
GetStartupInfoW
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
user32
UnregisterClassA
TranslateMessage
DispatchMessageW
GetMessageW
PostThreadMessageW
CharUpperW
CharNextW
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoTaskMemRealloc
oleaut32
SysFreeString
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
rpcrt4
CStdStubBuffer_DebugServerRelease
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
CStdStubBuffer_DebugServerQueryInterface
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
NdrOleAllocate
NdrOleFree
NdrStubForwardingFunction
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 4KB - Virtual size: 539B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.morpc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE