Static task
static1
Behavioral task
behavioral1
Sample
bbb60e6790d0036b179c5a99f115e395f3f3118b22a56eef408ee5d96880e1a1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbb60e6790d0036b179c5a99f115e395f3f3118b22a56eef408ee5d96880e1a1.exe
Resource
win10v2004-20221111-en
General
-
Target
bbb60e6790d0036b179c5a99f115e395f3f3118b22a56eef408ee5d96880e1a1
-
Size
69KB
-
MD5
1258553b0236fbba29e909fbca5b4fb4
-
SHA1
72dfacc23a0ec645f6a827d7fc77f69cc4a36e28
-
SHA256
bbb60e6790d0036b179c5a99f115e395f3f3118b22a56eef408ee5d96880e1a1
-
SHA512
a4e240450a09ded468d2a0a9c5bfc4f2fd0271af125c6c1cce8583de9465dce759b25496013f5d3c7ce62a9ddbc19353157803c4abf7503f172e3ff665d4c933
-
SSDEEP
1536:oFc31WKbu52B1SCcFbYGjPgJDD188OdHoHN:AHfCtIqDDS81N
Malware Config
Signatures
Files
-
bbb60e6790d0036b179c5a99f115e395f3f3118b22a56eef408ee5d96880e1a1.exe windows x86
8343b6eda5c05f3553cd61436eb268a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GlobalFree
GlobalAlloc
QueryPerformanceFrequency
CreateProcessA
GetFileAttributesA
WriteConsoleW
VirtualProtect
lstrcmpiA
lstrcmpA
SetEndOfFile
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
CloseHandle
WriteFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetSystemInfo
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
ReadFile
ole32
CoRevokeClassObject
OleInitialize
OleSetContainedObject
CoInitialize
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ