Static task
static1
Behavioral task
behavioral1
Sample
bb69a75903caf62d46be7415a591abf29f1771826ac5c2b3278a787a9c03eb14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb69a75903caf62d46be7415a591abf29f1771826ac5c2b3278a787a9c03eb14.exe
Resource
win10v2004-20221111-en
General
-
Target
bb69a75903caf62d46be7415a591abf29f1771826ac5c2b3278a787a9c03eb14
-
Size
164KB
-
MD5
cca8217f7289b302b874471b4dca2204
-
SHA1
3d3201591cd857fad7cd01c77180626e6559d2e6
-
SHA256
bb69a75903caf62d46be7415a591abf29f1771826ac5c2b3278a787a9c03eb14
-
SHA512
42ffc60c4c4525126f11c3b0e9de79019f686da6e8f890f41608e0e69e07b491ff63b90c48d1f7345387065b195a90c6831fa1391ae3f532edf134f49dca9d24
-
SSDEEP
3072:bdFUBazsy/Me1jFPncyu3NITfImn2g8VzZhdDGcsVGMu5:4ykeP/ONIcVzBDGZVhu
Malware Config
Signatures
Files
-
bb69a75903caf62d46be7415a591abf29f1771826ac5c2b3278a787a9c03eb14.exe windows x86
7f5000ddf4eeb0c34c3400456e7abd41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetDesktopWindow
kernel32
GetDriveTypeA
lstrlenA
GetVersion
OpenProcess
GlobalFindAtomA
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleA
VirtualAlloc
RtlMoveMemory
GetLastError
GetUserDefaultLangID
VirtualFree
Sections
.text Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Xgte. Cx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ