Static task
static1
Behavioral task
behavioral1
Sample
bab4146d2d087a0bdbfee76d52c9fa411112839fe39dbba9730199116ba9b42d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bab4146d2d087a0bdbfee76d52c9fa411112839fe39dbba9730199116ba9b42d.exe
Resource
win10v2004-20220812-en
General
-
Target
bab4146d2d087a0bdbfee76d52c9fa411112839fe39dbba9730199116ba9b42d
-
Size
170KB
-
MD5
61950430083ffad30e20d867c8b40dbf
-
SHA1
d47cbf9c3a5942cbee4424b9474646e83361aa64
-
SHA256
bab4146d2d087a0bdbfee76d52c9fa411112839fe39dbba9730199116ba9b42d
-
SHA512
bc4a92d957e2781bd2d4bac34d50da198ba39852834da661b029c375e9cfd46ac0c869f0832eb6e411b26e98bcb222cfcba288381e38b37cdb47ca744797571d
-
SSDEEP
3072:a4MuQfhIdmTYAAdrzivmROsaicKFM8TKcApiat1+/34Z80VyfIQzjqUA79:a4bchIdmET5mvshF7Kc2tIf080Vk72
Malware Config
Signatures
Files
-
bab4146d2d087a0bdbfee76d52c9fa411112839fe39dbba9730199116ba9b42d.exe windows x86
677ca6a240298ac85b9ffdcb6deb58cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
FlushFileBuffers
GetEnvironmentStringsW
GetProcAddress
AddAtomA
GetCPInfo
InitializeCriticalSection
Sleep
MulDiv
SetStdHandle
FreeEnvironmentStringsW
DeleteCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
lstrcatA
IsBadCodePtr
SetFilePointer
GetStringTypeW
LCMapStringW
GetThreadLocale
GetStartupInfoA
lstrlenA
IsBadReadPtr
GetStringTypeA
UnhandledExceptionFilter
FreeLibrary
GetOEMCP
EnumResourceNamesW
lstrcpynA
CloseHandle
LCMapStringA
CreateFileA
GetFileAttributesA
LeaveCriticalSection
GetEnvironmentStrings
VirtualProtect
GetDiskFreeSpaceA
FindFirstFileA
lstrcpyA
GetCurrentThreadId
WriteFile
lstrlenW
WideCharToMultiByte
GetLastError
GetFullPathNameA
MultiByteToWideChar
EnterCriticalSection
LoadLibraryA
lstrcmpA
GetTickCount
SetUnhandledExceptionFilter
ReadFile
GetModuleHandleA
RaiseException
Sections
.text Size: 93KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ