Static task
static1
Behavioral task
behavioral1
Sample
bb54e09e778188faa3184d30232815cc9491d47df6c68874b7c4ca5ccd0799b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb54e09e778188faa3184d30232815cc9491d47df6c68874b7c4ca5ccd0799b9.exe
Resource
win10v2004-20221111-en
General
-
Target
bb54e09e778188faa3184d30232815cc9491d47df6c68874b7c4ca5ccd0799b9
-
Size
746KB
-
MD5
983bf1359cf82239031773c8e67b4f5e
-
SHA1
ec5b5e870b216a70e768ea8fb9e15ba46fc63364
-
SHA256
bb54e09e778188faa3184d30232815cc9491d47df6c68874b7c4ca5ccd0799b9
-
SHA512
dc6ebfe997d05c02868e9b75f95847db3252bf49b0a8748d3c667e24a3b961fa1ea51c2fa81faa623958485968f71dc10e1886a16edd1f6e36346dd7935e9a75
-
SSDEEP
12288:e/YsWbHufJm2Z5OC5PhjcIiw3KMcGjSl94/2Ntd/yYANEICo1iZhxlZK:NDufI2Zv5PbeGjSl9Lrd/4xMhU
Malware Config
Signatures
Files
-
bb54e09e778188faa3184d30232815cc9491d47df6c68874b7c4ca5ccd0799b9.exe windows x86
41017dc67e06f81185e1b92840bf0170
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
HeapSize
CloseHandle
SetFileAttributesW
GetCurrentDirectoryW
ReadFile
DeleteFileW
SuspendThread
WaitForSingleObject
SetLastError
GetFileAttributesA
GetFileTime
ExitProcess
MapViewOfFile
Sleep
HeapCreate
GetModuleHandleA
GetEnvironmentVariableW
EnterCriticalSection
GetCommandLineW
FindAtomW
GetFileType
IsBadReadPtr
SetLastError
GetTickCount
uxtheme
DrawThemeEdge
DrawThemeBackground
OpenThemeData
GetWindowTheme
IsThemeActive
CloseThemeData
CloseThemeData
SetWindowTheme
GetThemeTextMetrics
GetThemeTextExtent
GetThemeEnumValue
GetThemeBool
GetThemeColor
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE