Static task
static1
Behavioral task
behavioral1
Sample
bb21975dfb12d62c208bf43bf0238c48c3a51dd193e35a1f61d7e968590ccb67.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb21975dfb12d62c208bf43bf0238c48c3a51dd193e35a1f61d7e968590ccb67.exe
Resource
win10v2004-20220901-en
General
-
Target
bb21975dfb12d62c208bf43bf0238c48c3a51dd193e35a1f61d7e968590ccb67
-
Size
192KB
-
MD5
ff2a6c502dcb40ca265cfed97014a170
-
SHA1
6281389fbb17b284061d30be9930c612efe49b8b
-
SHA256
bb21975dfb12d62c208bf43bf0238c48c3a51dd193e35a1f61d7e968590ccb67
-
SHA512
8ed59659df83f67d11c8cc54ea2d32657a8ffeae56ff75d8987219b037b03652a91bca3faa0e1c8f0cf957edcee6cbc532b8ef23f077a3e088dd9619fa32f3be
-
SSDEEP
3072:nlYxthP4Cd37OXZx2PHH1WvPX7mY2UzLdVTslt87:TC6WH1WXXyAZGlt6
Malware Config
Signatures
Files
-
bb21975dfb12d62c208bf43bf0238c48c3a51dd193e35a1f61d7e968590ccb67.exe windows x86
f173601c5a2cc48199809599451fcb59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
ReadConsoleA
VerLanguageNameA
WriteConsoleA
OutputDebugStringA
OutputDebugStringW
Sleep
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
user32
SetWindowLongA
TrackPopupMenu
SetTimer
DestroyIcon
CallWindowProcA
CreateWindowExA
DefWindowProcA
GetSubMenu
MessageBoxA
KillTimer
CreateMenu
DialogBoxParamA
UpdateWindow
GetParent
gdi32
CreateCompatibleDC
PolyTextOutA
TextOutA
CreateDCA
GetFontData
CreateDIBitmap
comdlg32
GetSaveFileNameA
ChooseFontA
shell32
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE