Static task
static1
Behavioral task
behavioral1
Sample
bb0994ef83caa4dc6bd476ac32b8fc31715fe673cf10730b20e40bdc65dc9fff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb0994ef83caa4dc6bd476ac32b8fc31715fe673cf10730b20e40bdc65dc9fff.exe
Resource
win10v2004-20220812-en
General
-
Target
bb0994ef83caa4dc6bd476ac32b8fc31715fe673cf10730b20e40bdc65dc9fff
-
Size
467KB
-
MD5
0c1f957ba15a908109c8ce6eaf114652
-
SHA1
e4ce756c218f8f11eaf1d27a3248066459bfabdc
-
SHA256
bb0994ef83caa4dc6bd476ac32b8fc31715fe673cf10730b20e40bdc65dc9fff
-
SHA512
fdbd7ed2fb173e2f3769f93c1b0d7f2f827c0eedfc5c67ec84815968c58b97f632dd5fbf88a009837532881d5119d074954786cfa92f8c17205c470f55a95e2f
-
SSDEEP
12288:GMDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0Uf:FplNFgxG5eZngb0U
Malware Config
Signatures
Files
-
bb0994ef83caa4dc6bd476ac32b8fc31715fe673cf10730b20e40bdc65dc9fff.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 441KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE