Static task
static1
Behavioral task
behavioral1
Sample
bab3b70d4b809ffd029999b471f6be09c7e5f5ee50013a04408cbc641dd19761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bab3b70d4b809ffd029999b471f6be09c7e5f5ee50013a04408cbc641dd19761.exe
Resource
win10v2004-20220812-en
General
-
Target
bab3b70d4b809ffd029999b471f6be09c7e5f5ee50013a04408cbc641dd19761
-
Size
199KB
-
MD5
da2b9885fb2db3214b146a0a412aa6ec
-
SHA1
6ca150392aa42dcabf76de34286a4f809a7d027e
-
SHA256
bab3b70d4b809ffd029999b471f6be09c7e5f5ee50013a04408cbc641dd19761
-
SHA512
ee02ed401138d06b1ff54a5cf3474e27a42b023f630ad6cbb91cec79acc9b9d69fe6f77625c4452d220aca3147816701a263ffe77da52de966ad8a9406444253
-
SSDEEP
3072:38n6/HBq3qAdGhS4k5p5pU4T4B+jca8Wz/9DMFIW925pOLA/hmqVvTVLC4HTkwe0:M+Bq3qnop535+Wzmw5pSqpheLwe0
Malware Config
Signatures
Files
-
bab3b70d4b809ffd029999b471f6be09c7e5f5ee50013a04408cbc641dd19761.exe windows x86
b0a0d1bbc91687014337bd3ad255a87e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeLabelA
CreateSemaphoreW
SetEndOfFile
AddAtomA
FindClose
GetProcessHeap
GetModuleFileNameA
DeleteAtom
CreateDirectoryA
CloseHandle
WaitForMultipleObjects
WriteFile
GetCommandLineA
HeapFree
CreatePipe
RemoveDirectoryA
GetModuleHandleA
GetDriveTypeW
FindAtomA
ClearCommBreak
GetFileType
ExitThread
IsBadWritePtr
HeapCreate
RemoveDirectoryA
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE