Static task
static1
Behavioral task
behavioral1
Sample
bab2f46c7517d07675d35eefbc5eb22ef7b2dca8287f6cf427d4e9c51b0f8008.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bab2f46c7517d07675d35eefbc5eb22ef7b2dca8287f6cf427d4e9c51b0f8008.exe
Resource
win10v2004-20220812-en
General
-
Target
bab2f46c7517d07675d35eefbc5eb22ef7b2dca8287f6cf427d4e9c51b0f8008
-
Size
787KB
-
MD5
0c1c8d8e36e36416425e7bc07a44ea01
-
SHA1
37e5c3cdd6dcb99c0792f69fc699fc5acb4a9386
-
SHA256
bab2f46c7517d07675d35eefbc5eb22ef7b2dca8287f6cf427d4e9c51b0f8008
-
SHA512
27a73f4058520c9002498d2e851d1d493cbb8ff82e233a9907f0a71a0ac2760678814ca0cd53ebd94f9de8a8d020dd178532f1b2058b97358db7040fbee175f3
-
SSDEEP
24576:MpYxDYjqExVqVDa+6DlwQhOlhT4vZtlLbaMM:rhFEG+5yyblc
Malware Config
Signatures
Files
-
bab2f46c7517d07675d35eefbc5eb22ef7b2dca8287f6cf427d4e9c51b0f8008.exe windows x86
2bf7f5c89a6d45060654adbc8ca7d415
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
GetConsoleMode
GetStdHandle
TerminateThread
FindResourceA
GetCurrentThreadId
LoadLibraryExW
Sleep
LocalFree
PulseEvent
HeapCreate
SetLastError
CloseHandle
CreateFileA
GlobalUnlock
GetModuleHandleA
lstrlenW
CreateMutexA
TlsGetValue
ReleaseMutex
user32
DrawEdge
IsWindow
DispatchMessageA
CheckRadioButton
GetDlgItem
CopyRect
FillRect
GetClipCursor
GetIconInfo
CallWindowProcA
GetDC
DrawMenuBar
SetFocus
apphelp
SdbFindFirstTag
SdbFindNextTag
SdbCloseDatabase
ApphelpCheckIME
SdbGetDatabaseID
clbcatq
ComPlusMigrate
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 778KB - Virtual size: 778KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ