Static task
static1
Behavioral task
behavioral1
Sample
bbb17749e7d4493a06e557a500eefd2f3472439ca955d2b2f74367c431d39348.exe
Resource
win7-20220414-en
General
-
Target
bbb17749e7d4493a06e557a500eefd2f3472439ca955d2b2f74367c431d39348
-
Size
74KB
-
MD5
0026837efde126f59238b7452d1a01c2
-
SHA1
1df151784fd01abbbcf0918f91634d2b89edf16f
-
SHA256
bbb17749e7d4493a06e557a500eefd2f3472439ca955d2b2f74367c431d39348
-
SHA512
ffb484eb3b4a1f029c6f7dcf0a19c475c871a282b49cde08c512a64878c597286405f27b9eb6c5ad677ec9155659f3979965c5be3594f50782524ab5b290757c
-
SSDEEP
1536:COhcT+vlrnLcZkrr3q2El0Pt7WIPMcbmCCsKdORx8Oiu6OW:COhcTSdnoZkrLq2El0Pt7ZiCCs9P8OMz
Malware Config
Signatures
Files
-
bbb17749e7d4493a06e557a500eefd2f3472439ca955d2b2f74367c431d39348.exe windows x86
53839d2836afb0bad38a4a66a7df8e7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cryptdll
CDLocateRng
MD5Update
CDBuildVect
MD5Init
shlwapi
UrlEscapeA
UrlCreateFromPathA
UrlCombineA
UrlCanonicalizeA
advapi32
RegUnLoadKeyA
RegCloseKey
RegCreateKeyExA
CreateServiceW
CreateServiceW
RegOpenKeyA
RegLoadKeyA
StartServiceW
RegSaveKeyA
IsValidAcl
kernel32
SetEnvironmentVariableW
lstrcpyA
CopyFileExW
InterlockedExchange
ReadProcessMemory
LoadLibraryW
FindClose
OpenProcess
UpdateResourceW
VirtualAlloc
GetModuleHandleA
CreateWaitableTimerW
GetProcessHeap
CreateMailslotW
GetTickCount
OpenWaitableTimerA
WriteConsoleA
CreateFileA
OpenWaitableTimerW
FileTimeToSystemTime
lstrcmp
certcli
CAEnumFirstCA
CADeleteCA
CACloseCA
CAEnumNextCA
CACloseCertType
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE