Static task
static1
Behavioral task
behavioral1
Sample
bb69766ec6a7e95c83cf6147a0455a96a22769cc4af4e2fc4df9913161761f09.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb69766ec6a7e95c83cf6147a0455a96a22769cc4af4e2fc4df9913161761f09.exe
Resource
win10v2004-20220901-en
General
-
Target
bb69766ec6a7e95c83cf6147a0455a96a22769cc4af4e2fc4df9913161761f09
-
Size
80KB
-
MD5
79ea712910ed1b5b5686fc9d5a7756bc
-
SHA1
83923f2f9f3aa93215c1607482f7508dc417abf3
-
SHA256
bb69766ec6a7e95c83cf6147a0455a96a22769cc4af4e2fc4df9913161761f09
-
SHA512
085a74518737f27dca2d037b213e5fe5e28cdebdec5bb89d158a4d25eaccfc19f1471fb0310c405694947df3133283b7a886ee8e24171d99849f03b9b043da6d
-
SSDEEP
768:7mgPUyNAP3r7m6wTrLU+umY/HgmuOzuzpK7ACQPde6DmlVZtilGQiWEz:7bPWPfmenYTOziRPsZ/tuVE
Malware Config
Signatures
Files
-
bb69766ec6a7e95c83cf6147a0455a96a22769cc4af4e2fc4df9913161761f09.exe windows x86
498ddfd5177d8baff14dc59425a1bd49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
SetHandleCount
LoadResource
FindResourceA
GetTempPathA
WaitForSingleObject
CreateProcessA
Process32Next
CloseHandle
CreateToolhelp32Snapshot
Sleep
TerminateProcess
GetCurrentThreadId
ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
CreateThread
GetLastError
CreateMutexA
GetStartupInfoA
GetModuleHandleA
FreeResource
DeleteFileA
LoadLibraryA
GetProcAddress
Process32First
FreeLibrary
user32
PostThreadMessageA
GetMessageA
ShowCursor
MessageBoxA
CreateDesktopA
GetInputState
CloseDesktop
GetDesktopWindow
GetWindow
GetWindowTextA
FindWindowExA
GetThreadDesktop
PostMessageA
wsprintfA
SetThreadDesktop
advapi32
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_except_handler3
_controlfp
_strcmpi
rename
_exit
_XcptFilter
exit
shlwapi
PathRemoveFileSpecA
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE