ZvQsOoC2hIrY
Static task
static1
Behavioral task
behavioral1
Sample
bb07c8851c673a0723896b96a5990e2ba90350bad24bf9816f2ccf12b93ca5b6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb07c8851c673a0723896b96a5990e2ba90350bad24bf9816f2ccf12b93ca5b6.exe
Resource
win10v2004-20220812-en
General
-
Target
bb07c8851c673a0723896b96a5990e2ba90350bad24bf9816f2ccf12b93ca5b6
-
Size
246KB
-
MD5
625d8117f9aa6aaefb1ae1e82e0bfe3c
-
SHA1
b6ffe4d061c4a4ee225ef89fc07229cde7b9b6c4
-
SHA256
bb07c8851c673a0723896b96a5990e2ba90350bad24bf9816f2ccf12b93ca5b6
-
SHA512
c1b05656f8087ed9c18c70e480a0e0d5d2dbe9203fc9b54b47498a66cd4d391c6073ee8441f89a6cc28039724df63ec8af1ce2ef068118817628998b4851a259
-
SSDEEP
6144:YC7GgUxXLYPTLM8/DtMbh7ZbPZgnRDNIN4gYQA:LOLYPg1ZbPZ62tA
Malware Config
Signatures
Files
-
bb07c8851c673a0723896b96a5990e2ba90350bad24bf9816f2ccf12b93ca5b6.exe windows x86
4e2bce302c75471daf5a280ae1e1fe35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA
user32
DrawFrameControl
SetPropA
DrawAnimatedRects
GetMenuItemInfoA
IsCharLowerA
MoveWindow
GetDC
LoadKeyboardLayoutA
ActivateKeyboardLayout
DrawTextA
GetSystemMenu
IsMenu
DispatchMessageW
SetWindowPos
IsChild
WaitMessage
DefMDIChildProcA
ShowOwnedPopups
GetScrollRange
DefFrameProcA
GetWindowTextLengthA
ClientToScreen
ScreenToClient
GetClassLongA
IsDialogMessageW
GetWindowThreadProcessId
UnregisterClassA
GetWindowDC
DefWindowProcA
GetClientRect
EnableScrollBar
TranslateMessage
GetClipboardData
GetClassNameA
GetDCEx
IntersectRect
GetMenu
RegisterClassA
CharLowerA
SetCursor
IsDialogMessageA
MessageBoxA
GetTopWindow
ShowWindow
GetSysColorBrush
RemoveMenu
IsCharUpperA
SetWindowLongA
GetKeyboardLayout
GetClassInfoA
PeekMessageA
RegisterClipboardFormatA
MsgWaitForMultipleObjects
CreatePopupMenu
ScrollWindow
DestroyWindow
SetCapture
GetWindowTextA
CharUpperBuffA
DrawIcon
IsDlgButtonChecked
IsZoomed
shell32
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetDesktopFolder
kernel32
GetOEMCP
VirtualAllocEx
SetHandleCount
GetFileAttributesA
FindResourceA
DeleteCriticalSection
LockResource
ReadFile
lstrcmpA
MoveFileExA
GetModuleFileNameA
CloseHandle
LoadLibraryA
lstrcpynA
GetSystemDefaultLangID
GetProcAddress
GetUserDefaultLCID
GetStdHandle
GetStartupInfoA
GetProcessHeap
ExitProcess
GlobalFindAtomA
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.badata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ