Static task
static1
Behavioral task
behavioral1
Sample
bab333189024de6165da61deb90c8b4ec763fd781b77727028f410ae274ef149.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bab333189024de6165da61deb90c8b4ec763fd781b77727028f410ae274ef149.exe
Resource
win10v2004-20220901-en
General
-
Target
bab333189024de6165da61deb90c8b4ec763fd781b77727028f410ae274ef149
-
Size
304KB
-
MD5
df928647410d5bb72bad2f832a78dc9d
-
SHA1
fff8c1d3e8ca360bc84623cd320824e0bf92e549
-
SHA256
bab333189024de6165da61deb90c8b4ec763fd781b77727028f410ae274ef149
-
SHA512
be03bb64cd7057311410344aa43abbd01a95cd600e230408f99cf925d2bcd31bdd905a8d3381a13543edb0f2b9a03814510e26f3514d85f41c919e3b9c3dbb56
-
SSDEEP
6144:GBiu3SCcjfJjAYL8SMvT8B32cV1Yzk/ccpT1Fua04W:GJfcTJXyvQmY1Yz0TH9m
Malware Config
Signatures
Files
-
bab333189024de6165da61deb90c8b4ec763fd781b77727028f410ae274ef149.exe windows x86
a5ea72cb46ad5a6227ce557ebb181cc1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
CloseHandle
LoadLibraryA
ExitProcess
user32
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA
advapi32
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegDeleteValueA
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ