Static task
static1
Behavioral task
behavioral1
Sample
b5c96182c0205792e006ee86482650eb7098caba9b753800a796879af113aa0e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b5c96182c0205792e006ee86482650eb7098caba9b753800a796879af113aa0e.exe
Resource
win10v2004-20221111-en
General
-
Target
b5c96182c0205792e006ee86482650eb7098caba9b753800a796879af113aa0e
-
Size
3.8MB
-
MD5
bf8bd00031a3a08e4e62dbfff08b9bfa
-
SHA1
1f1264370e6b86999998dd99596de4010a283c31
-
SHA256
b5c96182c0205792e006ee86482650eb7098caba9b753800a796879af113aa0e
-
SHA512
f25e70666ff8c0bce67e6f400386d69a125c2eb5eac98f0b4a69a8909042cc50d0335293e3093e2350b710ea0b275a9b7a852eac471371568d0fb368c3cbb2a5
-
SSDEEP
98304:WyfDgsCeWlw817dwOUCXuiwMU6Fnit62T4IQIXS5:WKDgdaAdfXuilbit6c4tIi5
Malware Config
Signatures
Files
-
b5c96182c0205792e006ee86482650eb7098caba9b753800a796879af113aa0e.exe windows x86
245ed63fd9757b7bfa725a5461b3af31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectA
FreeUserPhysicalPages
GetConsoleDisplayMode
GetLocaleInfoW
GetTimeFormatW
SizeofResource
GetProcAddress
GetModuleHandleA
FindResourceA
FindNextVolumeMountPointW
HeapReAlloc
ActivateActCtx
GetTickCount
SetConsoleCtrlHandler
GetConsoleAliasesA
HeapSize
GetCurrentProcess
ExitProcess
GlobalAlloc
GetFileAttributesA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RtlUnwind
GetStartupInfoW
HeapValidate
IsBadReadPtr
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetLastError
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
LoadLibraryA
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
user32
GetDesktopWindow
gdi32
GetBoundsRect
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ