Static task
static1
Behavioral task
behavioral1
Sample
bbb55bddd022b860e4b7e875c3b3f4c78664975a6e8d4832d00306c524297cf9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbb55bddd022b860e4b7e875c3b3f4c78664975a6e8d4832d00306c524297cf9.exe
Resource
win10v2004-20220901-en
General
-
Target
bbb55bddd022b860e4b7e875c3b3f4c78664975a6e8d4832d00306c524297cf9
-
Size
588KB
-
MD5
398df93d86d11fcf04dbda31812769a5
-
SHA1
8a6f66aca53de104875354734841e9c0fa6bb320
-
SHA256
bbb55bddd022b860e4b7e875c3b3f4c78664975a6e8d4832d00306c524297cf9
-
SHA512
2e80e4c2d06804a01b64218138039e02f5241b0a430995e03e9379ecf89431fb999271bb8587cdf53532380e58f2aad3d43c05fc7489bd731085be7990a90918
-
SSDEEP
12288:bdhX/npSI0RKUz3U6ilyL02hYSkns7Ti3Jrb9iH3wn/tWF6jm:bHX/gICKn6il80Zs7TApbe4sYK
Malware Config
Signatures
Files
-
bbb55bddd022b860e4b7e875c3b3f4c78664975a6e8d4832d00306c524297cf9.exe windows x86
0d3e32bc4aeae605703a7fd764d4e62c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetVersion
GetHandleInformation
GetLocalTime
DeleteVolumeMountPointW
WriteConsoleInputVDMA
EnumDateFormatsA
FreeLibrary
GetFileSizeEx
GetConsoleAliasW
ReadConsoleInputA
FatalExit
GetSystemTime
ReadConsoleOutputA
WriteConsoleOutputW
EnumSystemLocalesW
IsValidLocale
GetThreadLocale
GetStartupInfoA
opengl32
glPassThrough
glIndexiv
glRasterPos3d
glGetString
glEdgeFlagv
glVertex4sv
wglMakeCurrent
wglDeleteContext
glDrawPixels
glLoadMatrixd
wglGetDefaultProcAddress
glTexImage1D
glTexCoord4fv
glColor4f
glMaterialf
glMapGrid2f
glRasterPos3sv
glNormal3d
glMap1d
wglCreateContext
glEnd
glColor3b
glFogfv
glIndexubv
glColor3fv
glPixelMapusv
glStencilMask
glLightModeli
glIsEnabled
glEndList
msvcrt
ftell
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_mbsset
fwrite
feof
ferror
_heapset
fopen
fputs
_adj_fprem
fwprintf
signal
fputc
sprintf
_seterrormode
_amsg_exit
_spawnlpe
fprintf
fclose
fsetpos
memset
_lseek
_commit
memchr
_wspawnvp
_onexit
fread
_wcsupr
_unlink
_Getmonths
fseek
_strnicoll
_spawnvpe
printf
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE