Static task
static1
Behavioral task
behavioral1
Sample
bb9151c6e71f8bf52ce7fffa2fe7353896bca367670540b7abee3e097dfc3038.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb9151c6e71f8bf52ce7fffa2fe7353896bca367670540b7abee3e097dfc3038.exe
Resource
win10v2004-20220812-en
General
-
Target
bb9151c6e71f8bf52ce7fffa2fe7353896bca367670540b7abee3e097dfc3038
-
Size
317KB
-
MD5
0ca62e3f086864339b5b5248ecdf103f
-
SHA1
120825546f122aea0bd2a0b175acc21ed37708a9
-
SHA256
bb9151c6e71f8bf52ce7fffa2fe7353896bca367670540b7abee3e097dfc3038
-
SHA512
fbe6e5306463b1e92cb143794e122e0b6c2c44491879e54d1ee6b566f0b62d9ef7d8f91037566509f3046e56ebadd6c74e746a3a2ac5919bad87ec51746eb5e2
-
SSDEEP
6144:RhbasyXWuIIYcQnxveJs+8siaspZvAoevOwj55W82AUFIeagi34:XALIIYcYxve6+8si3pZvOvOwj55W828g
Malware Config
Signatures
Files
-
bb9151c6e71f8bf52ce7fffa2fe7353896bca367670540b7abee3e097dfc3038.exe windows x86
f219434618b66716c7ca59be5ce99198
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
select
__WSAFDIsSet
accept
send
recv
closesocket
kernel32
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
IsBadCodePtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetFileType
Sleep
WriteFile
WaitForSingleObject
GetLastError
CreateEventA
ReadFile
CloseHandle
CreateFileA
CreateThread
GetModuleFileNameA
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetSystemDirectoryA
GetLocalTime
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetComputerNameA
GetLocaleInfoA
GetVersionExA
DeleteFileA
CreateProcessA
OpenProcess
GetCurrentProcessId
CopyFileA
SetFileAttributesA
GetFileAttributesA
ExitProcess
CreateMutexA
MoveFileA
GetTempPathA
TerminateThread
SetFilePointer
GetFileSize
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
FindClose
FindNextFileA
FindFirstFileA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
TerminateProcess
GetLogicalDrives
SetConsoleCtrlHandler
WaitForMultipleObjects
GenerateConsoleCtrlEvent
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatus
IsBadWritePtr
IsBadReadPtr
HeapValidate
RtlUnwind
GetTimeZoneInformation
GetSystemTime
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
InitializeCriticalSection
FatalAppExitA
HeapAlloc
DebugBreak
GetStdHandle
OutputDebugStringA
HeapReAlloc
HeapFree
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ