Static task
static1
Behavioral task
behavioral1
Sample
bb724399fbb8386577f139c2362f80454ce96562488bc139a6ba9ea808e0d5c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb724399fbb8386577f139c2362f80454ce96562488bc139a6ba9ea808e0d5c9.exe
Resource
win10v2004-20220812-en
General
-
Target
bb724399fbb8386577f139c2362f80454ce96562488bc139a6ba9ea808e0d5c9
-
Size
342KB
-
MD5
ff545e9814376662b5d76604b59040a4
-
SHA1
a209f6acb4223ba2f0f78eb9344d1b4d77958111
-
SHA256
bb724399fbb8386577f139c2362f80454ce96562488bc139a6ba9ea808e0d5c9
-
SHA512
e24be8d5558f090d15fea2fc3f1efbfbbb02eeeead63802f381dda2e05480522cfa71dcfa943234d16952bcfa14888012ed0d7b6601ff07fec27b8db63ff6e84
-
SSDEEP
6144:BJtELcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/A3LuPbNNi0/:aFhgh2R8O+yFqpLh+QSBw4
Malware Config
Signatures
Files
-
bb724399fbb8386577f139c2362f80454ce96562488bc139a6ba9ea808e0d5c9.exe windows x86
fab919a5ff86dd64eecd7032969e9193
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CloseHandle
GetModuleHandleA
lstrlenA
IsDebuggerPresent
GetConsoleCP
GetStdHandle
GlobalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
CreateWaitableTimerA
GetACP
user32
DialogBoxParamA
GetDlgItem
IsMenu
GetMessageA
DispatchMessageA
GetDlgItemTextA
RedrawWindow
GetSubMenu
SetFocus
GetParent
EndDialog
CheckMenuItem
ClipCursor
DrawIconEx
apphelp
SdbCloseDatabase
ApphelpCheckIME
ApphelpShowDialog
SdbFindFirstTag
ApphelpCheckRunApp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ