Static task
static1
Behavioral task
behavioral1
Sample
BB7817829DE91CDF5C078B268B14FC0F3EDF38C0176A8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BB7817829DE91CDF5C078B268B14FC0F3EDF38C0176A8.exe
Resource
win10v2004-20220901-en
General
-
Target
BB7817829DE91CDF5C078B268B14FC0F3EDF38C0176A8.exe
-
Size
341KB
-
MD5
0379ca24225acb06f4de37ce0d1838f5
-
SHA1
85290c8c708c42d46763d6bc5ec188b14a0025d7
-
SHA256
bb7817829de91cdf5c078b268b14fc0f3edf38c0176a8df7f78081d9bfff4879
-
SHA512
ff3e66b29b3e0a050868aa1d3179db32c983c02614738295333912bd4e6f36039d14c71c189629831150e96cc8fa8129f5c4e8f0abf990bed0368deb75c9c792
-
SSDEEP
6144:Ac83qwgZtg9fR5xLvkVhEy62QdFEfODzsPLbFozs5BGzUigafwVf:AHqwiuTLvkwF2QdyWM9ozs5WR
Malware Config
Signatures
Files
-
BB7817829DE91CDF5C078B268B14FC0F3EDF38C0176A8.exe.exe windows x86
9f34cade94b987c6f286411305857db0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
GetModuleFileNameA
GetLocaleInfoA
_lwrite
GetCommTimeouts
GetSystemDirectoryA
CreateEventA
WriteConsoleW
BuildCommDCBA
AddConsoleAliasW
HeapLock
PeekConsoleInputW
EnumDateFormatsA
ResetEvent
UnregisterWait
LoadLibraryA
InterlockedDecrement
VerifyVersionInfoA
WaitNamedPipeW
FindResourceExW
VirtualQuery
GetFirmwareEnvironmentVariableW
GetModuleFileNameW
BeginUpdateResourceW
GetConsoleAliasExesLengthW
DeleteFileW
WriteConsoleOutputCharacterW
WriteConsoleA
LocalAlloc
GetProcAddress
GetUserDefaultLangID
GetConsoleAliasesLengthA
GetSystemWindowsDirectoryA
WritePrivateProfileStringW
EnumResourceNamesW
SearchPathA
CreateDirectoryA
RemoveDirectoryW
AreFileApisANSI
GetCurrentDirectoryW
SetFileAttributesW
CreateMutexA
GetNumaHighestNodeNumber
GetLongPathNameA
VirtualProtect
GetThreadLocale
GetCurrentProcessId
SetLastError
GetComputerNameExW
FindNextFileA
BuildCommDCBAndTimeoutsW
InitializeCriticalSection
EnumCalendarInfoA
_lopen
GetConsoleAliasExesW
GlobalMemoryStatus
ReadConsoleOutputCharacterW
EnumSystemLocalesW
GetComputerNameA
GetLastError
EnumTimeFormatsA
LoadLibraryW
GetProcessHeap
RaiseException
RtlUnwind
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
MultiByteToWideChar
HeapSize
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringW
GetStringTypeW
HeapReAlloc
SetEndOfFile
CreateFileW
advapi32
OpenEventLogA
ole32
OleUninitialize
winhttp
WinHttpCloseHandle
Sections
.text Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dalup Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jaxewid Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ