Static task
static1
Behavioral task
behavioral1
Sample
bb88445a44f3074b008907d765f02eca516750bd44fdd71769a6847f2894cbe8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb88445a44f3074b008907d765f02eca516750bd44fdd71769a6847f2894cbe8.exe
Resource
win10v2004-20220812-en
General
-
Target
bb88445a44f3074b008907d765f02eca516750bd44fdd71769a6847f2894cbe8
-
Size
12KB
-
MD5
6ceb576d54ea004535a1dfe613f90b00
-
SHA1
f7e2692d2f33f5cfa89340ab33d03e1208fe0474
-
SHA256
bb88445a44f3074b008907d765f02eca516750bd44fdd71769a6847f2894cbe8
-
SHA512
5df8d894e659e7e3418d059800a60b86f0f9287ac798a867fc01f5cd9cbfcd1a19719e302fa7883c84d199570b36a5243989a90cb150d8a732943b8b262790a2
-
SSDEEP
384:dXfuvFcnCE0DenkK+k1zBJxpvvvSvvv29M8D:AvoCE0DMzBfA8
Malware Config
Signatures
Files
-
bb88445a44f3074b008907d765f02eca516750bd44fdd71769a6847f2894cbe8.exe windows x86
de77bd7f1b9ba66402d1d75ef4d4c97c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
strcat
memset
strlen
??2@YAPAXI@Z
isalpha
islower
isupper
__set_app_type
strstr
wininet
InternetCloseHandle
kernel32
ExitProcess
GetLocaleInfoA
LoadLibraryA
GetProcAddress
MoveFileA
CopyFileW
DeleteFileA
DeleteFileW
CreateFileA
DeviceIoControl
CloseHandle
GetModuleHandleA
GetStartupInfoA
Sleep
user32
PostMessageA
SendMessageA
FindWindowA
CharLowerBuffA
ShowWindow
SetFocus
shell32
ShellExecuteA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmfuhcm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE