Static task
static1
Behavioral task
behavioral1
Sample
bb0f3516dee956e90eaacde1b24d4f6cdc30624b19584819de7c3bd69ad03c4b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb0f3516dee956e90eaacde1b24d4f6cdc30624b19584819de7c3bd69ad03c4b.exe
Resource
win10v2004-20220812-en
General
-
Target
bb0f3516dee956e90eaacde1b24d4f6cdc30624b19584819de7c3bd69ad03c4b
-
Size
856KB
-
MD5
6e27a74243c269e27dee6905685cf1a0
-
SHA1
1b76b1cf3654dab42c624e422a554c2b773cc1a4
-
SHA256
bb0f3516dee956e90eaacde1b24d4f6cdc30624b19584819de7c3bd69ad03c4b
-
SHA512
c04a40953a7aa93b1055788762ecc57ea8ce03dd7db55afed23cfad5a83adbda64c141a4abb50405023501411e041db8d7e333a35165bc737646290a77f746b2
-
SSDEEP
12288:T/uIltFmSJj+e0lK/rwTemKg2mmsnHZwQJGSFknyFwWxBRA5teig0SQakpjmSB5:TTtFxJ/0YTBsHV+yDxP+eIzbjmSXxS7
Malware Config
Signatures
Files
-
bb0f3516dee956e90eaacde1b24d4f6cdc30624b19584819de7c3bd69ad03c4b.exe windows x86
87ead0ca8fc5e36af8503e6d6959727b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
GetLocaleInfoW
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeZoneInformation
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetLocaleInfoA
SetEnvironmentVariableW
SetEnvironmentVariableA
FlushFileBuffers
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
ReadFile
WriteFile
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
WideCharToMultiByte
DeleteCriticalSection
HeapFree
HeapReAlloc
HeapAlloc
GetVersionExA
CreateThread
GetCurrentThreadId
ExitThread
GetFileAttributesA
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
FindClose
FindNextFileA
FindFirstFileA
GetExitCodeThread
LoadLibraryA
CloseHandle
comdlg32
ChooseFontW
ole32
CoInitialize
CoUninitialize
ntdll
tolower
msvcrt
puts
time
gmtime
printf
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 736KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ