Static task
static1
Behavioral task
behavioral1
Sample
bb13c4ea2cc71d9a3b9c78b33763980255bc2a00c5ea1e9255abadfecf8069b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb13c4ea2cc71d9a3b9c78b33763980255bc2a00c5ea1e9255abadfecf8069b9.exe
Resource
win10v2004-20220901-en
General
-
Target
bb13c4ea2cc71d9a3b9c78b33763980255bc2a00c5ea1e9255abadfecf8069b9
-
Size
228KB
-
MD5
98527f2e4451886a04a60364d24d74d8
-
SHA1
8acfe200e1e0663647c6cd75e57610976056823a
-
SHA256
bb13c4ea2cc71d9a3b9c78b33763980255bc2a00c5ea1e9255abadfecf8069b9
-
SHA512
35663e0113395310c2ce207785833e8521ad17fee11fdd71ab0be379b9ef2729419a5ce2ef800f8b5611b7eac55c01cccf111cf892477de28498a7dd779fe12c
-
SSDEEP
3072:MHypUE+qEBN2YRL4bdRCIbqCt9RuDcxYA2O2dJPMnDl7pBKz6L/3:oyf+DBkYRKRCImCt9RKcqA21IDl1BXLP
Malware Config
Signatures
Files
-
bb13c4ea2cc71d9a3b9c78b33763980255bc2a00c5ea1e9255abadfecf8069b9.exe windows x86
d378ad35583db76386eb6cc795e0005b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfW
user32
CharLowerBuffA
DispatchMessageA
DrawIcon
GetCursorPos
GetDlgItem
GetKeyboardState
GetWindowLongA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
PeekMessageA
ToUnicode
Sections
.wlwzqb Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gvcb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ropch Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stalin Size: 78B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ