Static task
static1
Behavioral task
behavioral1
Sample
bb322f97e76d8d677f5292df21615199db9af691e3037ca9140a98321ce7cc2d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb322f97e76d8d677f5292df21615199db9af691e3037ca9140a98321ce7cc2d.exe
Resource
win10v2004-20220812-en
General
-
Target
bb322f97e76d8d677f5292df21615199db9af691e3037ca9140a98321ce7cc2d
-
Size
375KB
-
MD5
8a7542ff7efcdb1c4aefaf6560981b75
-
SHA1
141a69955a819ea0060f8a5a5d47c28c852d5cd4
-
SHA256
bb322f97e76d8d677f5292df21615199db9af691e3037ca9140a98321ce7cc2d
-
SHA512
fa266c6b7addd549090329cdd88df35c68055f46328ffc1150d4a5b67aa37aafa4f1bb6bd1cfa7374e7ae6dffd6f5ef8b1d1f0ca460b40d0d9d41c0098ada0ae
-
SSDEEP
6144:Ga6Z23kbgfgBurPoz4mpO2OfgQLtDLZMBwNSPGqPVuqh5XM3chOytMR:42Eg1bU4mpOHgQhLZMBwgP3dREchOio
Malware Config
Signatures
Files
-
bb322f97e76d8d677f5292df21615199db9af691e3037ca9140a98321ce7cc2d.exe windows x86
f89fdc7d59805b131aa65ffa38817120
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetCurrentThreadId
lstrlenA
GetCommandLineA
UnmapViewOfFile
CreateProcessA
PulseEvent
LocalFree
lstrcpyA
FindClose
CloseHandle
CreateFileW
FindResourceW
GetModuleHandleA
LoadLibraryW
HeapCreate
GlobalUnlock
Sleep
GetComputerNameA
GetCurrentDirectoryA
user32
SetFocus
CreateWindowExA
CheckRadioButton
IsWindow
GetCaretPos
GetDC
DispatchMessageA
CallWindowProcA
DrawEdge
FillRect
CreateIcon
DrawMenuBar
GetDlgItem
cryptui
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectCA
LocalEnroll
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ