Static task
static1
Behavioral task
behavioral1
Sample
b1a705cc5dadd4aece01bedec08657b96398d09e610d99cd14f0896825d70d09.exe
Resource
win10v2004-20221111-en
General
-
Target
b1a705cc5dadd4aece01bedec08657b96398d09e610d99cd14f0896825d70d09
-
Size
281KB
-
MD5
0a186fa4a91ce443a5a3d0e78cc3fecd
-
SHA1
bdeb02c27daf804f8fad93106f31ca0f197b4b78
-
SHA256
b1a705cc5dadd4aece01bedec08657b96398d09e610d99cd14f0896825d70d09
-
SHA512
bc4db70d51ab293aee0709e0d13ff971a37e210adf1858bcb07f5e7f7f41c94353e08a1b425100d2820c720f19859dbaac6a95d541f9f900c70a34c929f62281
-
SSDEEP
3072:h5QPa45Ov1oO37aoZ72yqvUlgr2W4R5LsvfB1m9k5ayy7ND4L5+TDbwfSSSSSSzi:LQJ0f37HqvsW4RivfB0F163/S8aF9Z9
Malware Config
Signatures
Files
-
b1a705cc5dadd4aece01bedec08657b96398d09e610d99cd14f0896825d70d09.exe windows x86
1170972bab2bb311af28ba139b2b33a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
RaiseException
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapSize
CloseHandle
SetThreadPriority
ResumeThread
CreateThread
WaitForSingleObject
CreateMutexW
GetConsoleMode
GetModuleHandleW
GetSystemTimeAsFileTime
Sleep
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetLastError
GetModuleFileNameA
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapAlloc
GetModuleHandleA
user32
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
SetWindowTextW
GetClientRect
UpdateWindow
SendMessageW
GetMenu
SetTimer
GetDC
CreateWindowExW
EnableMenuItem
CheckMenuItem
GetSubMenu
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
MessageBoxA
ShowWindow
MessageBoxW
CreateDialogParamW
EndDialog
DialogBoxParamW
PostQuitMessage
SendDlgItemMessageW
gdi32
CreateSolidBrush
SetROP2
GetROP2
BitBlt
GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
Ellipse
SelectObject
CreateHatchBrush
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ