Static task
static1
Behavioral task
behavioral1
Sample
bb41205d098bfaf88a21a3f59b04ff5eaa42ef5c343d493f29e40b5dac5bb6ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb41205d098bfaf88a21a3f59b04ff5eaa42ef5c343d493f29e40b5dac5bb6ac.exe
Resource
win10v2004-20220901-en
General
-
Target
bb41205d098bfaf88a21a3f59b04ff5eaa42ef5c343d493f29e40b5dac5bb6ac
-
Size
115KB
-
MD5
813e1201ab80e935720751a9cd262a92
-
SHA1
6bbe140ee0482f70d1c0269e8121dc8906a51943
-
SHA256
bb41205d098bfaf88a21a3f59b04ff5eaa42ef5c343d493f29e40b5dac5bb6ac
-
SHA512
817b5228aa3affd5df2782f6ca71fbc8ea4fd80dd5a11987077cd78d6888d72ee4a5b21f9bf793b7dc8c103ac06f62af94f7dfd910198e3246ecbdc1e4bcaaba
-
SSDEEP
1536:pXM7au4eyiyF8GRdBWd+J2jtTihUDaaWr8kPGpiFCErYxZymPTxccyERJAC4wBC:C7abes80BK+4tTiaohbL+CERJAC4wB
Malware Config
Signatures
Files
-
bb41205d098bfaf88a21a3f59b04ff5eaa42ef5c343d493f29e40b5dac5bb6ac.exe windows x86
a0350d067de8d89724c4255b085a01f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CancelIo
CreateEventA
CreateMailslotA
CreateMutexA
DeleteFileA
DeviceIoControl
ExitProcess
FindAtomA
FreeLibrary
GetACP
GetAtomNameA
GetCPInfoExA
GetCommConfig
GetCommMask
GetCommandLineA
GetConsoleCP
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetLogicalDriveStringsA
GetMailslotInfo
GetModuleHandleA
GetPrivateProfileSectionA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetThreadPriority
GetThreadPriorityBoost
GlobalWire
HeapDestroy
IsBadReadPtr
IsValidCodePage
LoadLibraryA
OpenFileMappingA
PurgeComm
ReadConsoleA
RemoveDirectoryA
ResetEvent
SetEvent
SetLastError
SetUnhandledExceptionFilter
SignalObjectAndWait
UnmapViewOfFile
VirtualProtect
WaitNamedPipeA
WriteProcessMemory
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
strcpy
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE