Static task
static1
Behavioral task
behavioral1
Sample
bbff02b1001f9eacbaf8afbef220f09f7a016670658a9a473ee563ec741a0695.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbff02b1001f9eacbaf8afbef220f09f7a016670658a9a473ee563ec741a0695.exe
Resource
win10v2004-20220812-en
General
-
Target
bbff02b1001f9eacbaf8afbef220f09f7a016670658a9a473ee563ec741a0695
-
Size
175KB
-
MD5
cd65e35d4f9f54ef068eaef22fbd6882
-
SHA1
ef56cb91ef00e4ee6b4b464f3c1a60043480b37c
-
SHA256
bbff02b1001f9eacbaf8afbef220f09f7a016670658a9a473ee563ec741a0695
-
SHA512
dccd38d9333fef2cec1bde833539b00d624fd3160da3da2ff18043b7ce1474f84cb3a38b9a9408644a6ea42e942c78652233eebce0bcc2b07589b81652ec2c82
-
SSDEEP
3072:6qYXNOlonC99U36+QpEIz1TJi+e9W5jXku5:F8Bnq9C6+QTz1Fe9WJ0
Malware Config
Signatures
Files
-
bbff02b1001f9eacbaf8afbef220f09f7a016670658a9a473ee563ec741a0695.exe windows x86
3a3fabef4a195e52669aacc791924d1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
ExitThread
Sleep
ReadFile
PeekNamedPipe
WriteFile
CreatePipe
DisconnectNamedPipe
TerminateProcess
WaitForMultipleObjects
TerminateThread
CreateThread
GetStdHandle
FreeConsole
SetEndOfFile
GetNumberOfConsoleInputEvents
PeekConsoleInputA
SetConsoleMode
ReadConsoleInputA
GetTimeZoneInformation
CreateFileA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetLocaleInfoW
HeapSize
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
MultiByteToWideChar
CompareStringA
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
ExitProcess
Beep
RtlUnwind
InterlockedExchange
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
DeleteCriticalSection
FatalAppExitA
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetProcessHeap
wsock32
__WSAFDIsSet
select
listen
getsockname
recvfrom
accept
WSASetLastError
socket
setsockopt
bind
connect
htons
getservbyport
ntohs
getservbyname
ioctlsocket
gethostbyname
inet_addr
gethostbyaddr
WSAGetLastError
WSAStartup
WSACleanup
shutdown
closesocket
recv
send
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE