Static task
static1
Behavioral task
behavioral1
Sample
bbb948b9626ffc106a80903b88db1af20d05477dc51da76c7a247e97e4a03b83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbb948b9626ffc106a80903b88db1af20d05477dc51da76c7a247e97e4a03b83.exe
Resource
win10v2004-20221111-en
General
-
Target
bbb948b9626ffc106a80903b88db1af20d05477dc51da76c7a247e97e4a03b83
-
Size
169KB
-
MD5
cee0742c21dfd97df3406c14aae6fdd7
-
SHA1
7193035af52a04c04e221a627de44611fc0c08f1
-
SHA256
bbb948b9626ffc106a80903b88db1af20d05477dc51da76c7a247e97e4a03b83
-
SHA512
7461e9336e6c1559028521e14648dde2647c25863cc92faa1b17b51770e67388607e0b6c7ee9c354706f7b35eca1aae7b2250d93aeed1553b84ea992eaabd2f0
-
SSDEEP
3072:lTC8fahmDuHA+CZJstbLWbSxKw6kEPwT8eKYOc7g0uROu2e06cIfdeF+Mzko:lT5fahmD8CkhWbSxf4wzV7gHL2t6DRMz
Malware Config
Signatures
Files
-
bbb948b9626ffc106a80903b88db1af20d05477dc51da76c7a247e97e4a03b83.exe windows x86
18523e0964ac3c897ca52a178f0db439
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GetModuleHandleA
FreeLibrary
LCMapStringW
CloseHandle
AddAtomA
GetLastError
lstrcpynA
lstrcmpiA
GetProcAddress
lstrcatA
MultiByteToWideChar
GetCurrentThreadId
LeaveCriticalSection
GetStringTypeA
EnterCriticalSection
IsBadCodePtr
SetFilePointer
FindFirstFileA
FreeEnvironmentStringsA
GetEnvironmentStringsW
WriteFile
MulDiv
DeleteCriticalSection
UnhandledExceptionFilter
FlushFileBuffers
FreeEnvironmentStringsW
GetStartupInfoA
GetFileAttributesA
ReadFile
SetUnhandledExceptionFilter
EnumResourceNamesW
CreateFileA
GetDiskFreeSpaceA
lstrcpyA
IsBadReadPtr
Sleep
GetFullPathNameA
VirtualProtect
SetDllDirectoryW
InitializeCriticalSection
lstrlenA
GetOEMCP
GetThreadLocale
LoadLibraryA
SetStdHandle
lstrcmpA
GetEnvironmentStrings
GetCPInfo
GetStringTypeW
WideCharToMultiByte
LCMapStringA
GetTickCount
RaiseException
Sections
.text Size: 90KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ