Static task
static1
Behavioral task
behavioral1
Sample
bb111e7d80a188b805a7bebbe6dcfd3b5addb787c3568d279feed458f5e0926a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb111e7d80a188b805a7bebbe6dcfd3b5addb787c3568d279feed458f5e0926a.exe
Resource
win10v2004-20221111-en
General
-
Target
bb111e7d80a188b805a7bebbe6dcfd3b5addb787c3568d279feed458f5e0926a
-
Size
29KB
-
MD5
a88042c329f49edb9884dfd824066bed
-
SHA1
5986ab25e038071c6dc6fa6c2f63ad28df82476c
-
SHA256
bb111e7d80a188b805a7bebbe6dcfd3b5addb787c3568d279feed458f5e0926a
-
SHA512
848718813d2fe55f0f5db9ed0c765c2cfdf889995ba6921258ff487c074e46b05b58c1f01c1413dde8b01f78401ef47b9096c2eac6380c372594e2cb80d6d2f7
-
SSDEEP
768:+V7Y1NkRMpjslimagu7OivSOQFjXi576RSdG9:M7Y1NDOiJgviIi576MdG9
Malware Config
Signatures
Files
-
bb111e7d80a188b805a7bebbe6dcfd3b5addb787c3568d279feed458f5e0926a.exe windows x86
4d4a674dd50ed6f7c3fc1a70eed172b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetLastError
lstrlenA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
CreateFileA
WriteFile
FlushFileBuffers
CloseHandle
GlobalFree
GetTickCount
ReleaseMutex
ExitProcess
RtlZeroMemory
ExitThread
TerminateThread
TerminateProcess
CreateThread
GlobalAlloc
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GlobalLock
GlobalHandle
GlobalUnlock
GetFileSize
ReadFile
user32
GetClassNameA
IsWindowVisible
FindWindowA
FindWindowExA
EnumWindows
SetFocus
SetForegroundWindow
advapi32
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptDecrypt
CryptDestroyKey
comctl32
InitCommonControls
ws2_32
WSACleanup
listen
accept
shutdown
closesocket
recv
send
WSAStartup
htons
socket
bind
dnsapi
DnsFlushResolverCache
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ