Static task
static1
Behavioral task
behavioral1
Sample
H.B.L.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
H.B.L.exe
Resource
win10v2004-20220812-en
General
-
Target
H.B.L.zip
-
Size
521KB
-
MD5
0a1f7fc36c06bb769c0c2e6df72c8e24
-
SHA1
ebbc4bc2609ec8734ebcede1b5683d1825522c29
-
SHA256
4adc31bb044a1725b5924da056760d5f37e5ff56b6c63820bc7670c4ecd4cf4e
-
SHA512
bca9488d2bb5c1b15525cf6d1a6dbaf46be2d5fd3c6fd330b9f5b3b4ceb4e6c31f0ede3c975e8340097727e14e5e93d2f034d33bd17962eb86f9a0bc3d11a41b
-
SSDEEP
12288:BXznnagtOGd8cUENwk0AY6RabucZ76QBT5nKCrdRuNT:BXzaYOwUENw7AY60lZlKadRKT
Malware Config
Signatures
Files
-
H.B.L.zip.zip
-
H.B.L.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ