Static task
static1
Behavioral task
behavioral1
Sample
b2039ffb6400d433462ccfefb0f672b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2039ffb6400d433462ccfefb0f672b6.exe
Resource
win10v2004-20220812-en
General
-
Target
b2039ffb6400d433462ccfefb0f672b6.exe
-
Size
483KB
-
MD5
b2039ffb6400d433462ccfefb0f672b6
-
SHA1
dc7503f531e0afaf954cb43f964373aeed56cd83
-
SHA256
73f187b8ae22bc5de914056a6dad79f78c0d5de887020b31fda74737df837f78
-
SHA512
591d1beffe914285c760ea611be028c43ac8a39821db8275634dc9b9a2c6d7179c6f268b934e64a63aa42c182282ba9f8831320eb87c8ae97563246e91263369
-
SSDEEP
12288:2CcmFM0luMoL4Ip5iYVCZWOERUB3HDrOtW:27m20M4IpAqCZZE6B3POc
Malware Config
Signatures
Files
-
b2039ffb6400d433462ccfefb0f672b6.exe.exe windows x86
7dc8a7abc496d99feefc72c0a0d7748c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
_onexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
toupper
rand
srand
putchar
getc
fopen
fclose
__dllonexit
_kbhit
kernel32
EnumResourceTypesA
GetConsoleCP
LockFileEx
GetFileAttributesExW
GetCommProperties
GetMailslotInfo
GetStartupInfoA
GetModuleHandleA
SetConsoleCursorPosition
SleepEx
GetStdHandle
BeginUpdateResourceW
winmm
waveOutBreakLoop
waveInReset
timeSetEvent
msacm32
acmGetVersion
acmStreamReset
acmFilterDetailsW
acmStreamClose
acmFormatTagDetailsA
acmDriverRemove
ole32
GetClassFile
OleTranslateAccelerator
HBRUSH_UserSize
WriteClassStg
rtm
MgmGetFirstMfe
MgmReleaseInterfaceOwnership
RtmRegisterClient
RtmBlockSetRouteEnable
RtmDeregisterClient
RtmGetRouteAge
RtmIsRoute
msi
ord16
ord50
ord171
ord129
ord55
ord28
ord73
loadperf
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
mswsock
SetServiceA
rexec
GetAcceptExSockaddrs
TransmitFile
GetNameByTypeA
GetTypeByNameW
AcceptEx
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ