Static task
static1
Behavioral task
behavioral1
Sample
5bb29ff48a651acb372879192bcf0a90757bbdd0e9028264ca1847358f11961b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bb29ff48a651acb372879192bcf0a90757bbdd0e9028264ca1847358f11961b.exe
Resource
win10v2004-20220812-en
General
-
Target
5bb29ff48a651acb372879192bcf0a90757bbdd0e9028264ca1847358f11961b
-
Size
140KB
-
MD5
4f7aab2258124b883859e4b7637b7b7b
-
SHA1
6b6b93e8f23acb56f987027efba884b65015a46c
-
SHA256
5bb29ff48a651acb372879192bcf0a90757bbdd0e9028264ca1847358f11961b
-
SHA512
7b39efba5c8e2b8dcc9b4579c5d7e6b61416407228245f6dca4c937f62672dc5e4b6d932b06483b0419189f01252b0fc448a2c0c50b85604586d60a6ce68464d
-
SSDEEP
3072:0ZwD/RAdhD91anTc+YH882/jGN/yDoPx6:kwD679ET3jY6sx
Malware Config
Signatures
Files
-
5bb29ff48a651acb372879192bcf0a90757bbdd0e9028264ca1847358f11961b.exe windows x86
88b9b708ea97f84e5f3eae8c4b29d201
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
lstrcmpiA
GetTickCount
TerminateProcess
OpenProcess
MultiByteToWideChar
lstrlenA
FreeLibrary
GetSystemDirectoryA
SetFileTime
SystemTimeToFileTime
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
UnmapViewOfFile
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
LoadLibraryExA
GlobalAlloc
WriteFile
SetFileAttributesA
CopyFileA
DeleteFileA
MoveFileA
FindNextFileA
FindFirstFileA
GlobalFree
GetTempPathA
MoveFileExA
Sleep
GetVersionExA
GetWindowsDirectoryA
WaitForSingleObject
CreateThread
GetCurrentThreadId
GetLastError
SetFilePointer
lstrcatA
GetLocalTime
DeviceIoControl
user32
wvsprintfA
wsprintfA
ole32
CoCreateGuid
msvcrt
fseek
_strnicmp
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
localtime
swprintf
wcscpy
fclose
_wcsnicmp
fwrite
fopen
ws2_32
WSCEnumProtocols
WSCWriteProviderOrder
WSCInstallProvider
WSCGetProviderPath
WSCDeinstallProvider
Sections
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ