Static task
static1
Behavioral task
behavioral1
Sample
ba2b5a56766bda1c5757e919777a00c54b27c0a09517f933542bb299feda1faa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba2b5a56766bda1c5757e919777a00c54b27c0a09517f933542bb299feda1faa.exe
Resource
win10v2004-20221111-en
General
-
Target
ba2b5a56766bda1c5757e919777a00c54b27c0a09517f933542bb299feda1faa
-
Size
63KB
-
MD5
8711ca816ba696747af770e9856414fa
-
SHA1
87af4bd38d1de8939855fa9f83884ce33d559090
-
SHA256
ba2b5a56766bda1c5757e919777a00c54b27c0a09517f933542bb299feda1faa
-
SHA512
21ae76273f86847bffc2bc4d20206b28e32c3a1d607546a74eda6855b1b434bed4acca58073013a9acd370f4b94e5486a74208a374936d02f35ae3aef20b1938
-
SSDEEP
1536:UUX6mJBwao5s7jZ3wyYKvn4JHRWLSJYhWJuxG05e:UlmJBwao5QjSxE4J41htz5e
Malware Config
Signatures
Files
-
ba2b5a56766bda1c5757e919777a00c54b27c0a09517f933542bb299feda1faa.exe windows x86
bc039f481df9d7765e170099ae67a882
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalMemoryStatus
FindFirstFileA
InterlockedCompareExchange
ExpandEnvironmentStringsW
lstrlenA
ContinueDebugEvent
QueryDosDeviceW
SetConsoleNlsMode
HeapExtend
FindActCtxSectionStringW
DeleteAtom
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE