Static task
static1
Behavioral task
behavioral1
Sample
bab11019030101fe6da491de19eb12ccaedd1dda36282a707479f3af186c8ab5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bab11019030101fe6da491de19eb12ccaedd1dda36282a707479f3af186c8ab5.exe
Resource
win10v2004-20221111-en
General
-
Target
bab11019030101fe6da491de19eb12ccaedd1dda36282a707479f3af186c8ab5
-
Size
68KB
-
MD5
174acfd28ae87804a7389a5993a6b0c2
-
SHA1
1e2720b60c5591d114474e0392f98ce5acc31b02
-
SHA256
bab11019030101fe6da491de19eb12ccaedd1dda36282a707479f3af186c8ab5
-
SHA512
ec4cce1cf22e771a37493b5e5e6d359367e4cd332de385386fd59ceefd7af885a67b2f721323710598413c72bfac652628a05f87302545366502792187f65f5e
-
SSDEEP
768:pWj8C9v2f3tomPwCEQPKeDm0p0OuqRjK5gxTKdf1zBmQzTGfmgyqKVU:08Jfd/PgQ750OuqRQsgf1zwQVgvKa
Malware Config
Signatures
Files
-
bab11019030101fe6da491de19eb12ccaedd1dda36282a707479f3af186c8ab5.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE