Static task
static1
Behavioral task
behavioral1
Sample
bb30f82a19b7ee55d4928331c806eb705e72470934157cf94bedf16116b2bb2d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb30f82a19b7ee55d4928331c806eb705e72470934157cf94bedf16116b2bb2d.exe
Resource
win10v2004-20220812-en
General
-
Target
bb30f82a19b7ee55d4928331c806eb705e72470934157cf94bedf16116b2bb2d
-
Size
301KB
-
MD5
5ad511220495f83b85cfb3c0945bc5e0
-
SHA1
37aeeed8dfa1c79466584b1909e6552f2e4c1685
-
SHA256
bb30f82a19b7ee55d4928331c806eb705e72470934157cf94bedf16116b2bb2d
-
SHA512
781e46930c9798a4be8cbdd3bfcb998730dc73fe517872df6a013503cf749f5f3ee227c3853e605621012394bd9c33e75cf70fdb0ad9bcd833de012b719efa07
-
SSDEEP
6144:ysJlEsHxPE8N2Ed41EswHpoUk86xfe14glGTY+u9R:BlEEPRYEdGmHpoHplgl1lR
Malware Config
Signatures
Files
-
bb30f82a19b7ee55d4928331c806eb705e72470934157cf94bedf16116b2bb2d.exe windows x86
4bae9b074b346f4eaa19db959216562d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
CreateDirectoryA
VirtualProtect
MapViewOfFile
GetDriveTypeW
GetLocaleInfoA
GetCommandLineA
CancelIo
GetModuleHandleA
HeapSize
SetLocalTime
SetLastError
RemoveDirectoryA
GetStdHandle
DeleteFileA
ResetEvent
IsBadWritePtr
GetFileAttributesA
WriteFile
GetProcessHeap
CreateMailslotA
user32
wsprintfA
PeekMessageA
GetCaretPos
SetCursor
DestroyMenu
PostMessageW
SetFocus
GetCapture
GetWindowLongW
LoadImageA
DispatchMessageA
LoadCursorA
GetWindowTextW
filemgmt
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ