Static task
static1
Behavioral task
behavioral1
Sample
babe5792b4eeead222b3b87146301da8dadf2151202d4ecccad80c6835e3ea06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
babe5792b4eeead222b3b87146301da8dadf2151202d4ecccad80c6835e3ea06.exe
Resource
win10v2004-20221111-en
General
-
Target
babe5792b4eeead222b3b87146301da8dadf2151202d4ecccad80c6835e3ea06
-
Size
110KB
-
MD5
d4ecf14c9726dca88e231676580d9c5c
-
SHA1
3a7fe00aefb04ab867700d9c51c74e72ea4c5c12
-
SHA256
babe5792b4eeead222b3b87146301da8dadf2151202d4ecccad80c6835e3ea06
-
SHA512
d8be6c3905991c657f2b639ad9b59a131738644aa7f1ba10e7654f9151d49a1fbc50eabee7a3246ba9bbe625dbd71856430be318113848576386e145d369f1a2
-
SSDEEP
1536:oe9gFM72BfXi0xx5fm7QlquDsizHDIJOu7swbhtDfvfyOU5aD:R6M72BPzfm093I4wVtDnfyOUE
Malware Config
Signatures
Files
-
babe5792b4eeead222b3b87146301da8dadf2151202d4ecccad80c6835e3ea06.exe windows x86
07aa02a6efc4c8d887252150dea78fbe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
ExitProcess
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 783B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ