Static task
static1
Behavioral task
behavioral1
Sample
bbb225eaa2d1499a66697445d1a665a17d2cc58e4a0b50aa8bdee2dbf6d9f1f7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbb225eaa2d1499a66697445d1a665a17d2cc58e4a0b50aa8bdee2dbf6d9f1f7.exe
Resource
win10v2004-20221111-en
General
-
Target
bbb225eaa2d1499a66697445d1a665a17d2cc58e4a0b50aa8bdee2dbf6d9f1f7
-
Size
103KB
-
MD5
bf451655b6ed90c5e0e40e780c57f2c8
-
SHA1
0e1b5fa31a62a81a3fdaaa41f5103bebdccb1a8c
-
SHA256
bbb225eaa2d1499a66697445d1a665a17d2cc58e4a0b50aa8bdee2dbf6d9f1f7
-
SHA512
74570da09e6c54dca6a881d189e600f5dbb5ed28344c1f41f9f03c47937a08e3608dcc463ec1bf0ff675dbc0e3bad538127a847c9863327739e30e0ef99e6b46
-
SSDEEP
3072:PgomMJNslKUUNmUuV7pbuW40G+cn+LpXFm:gMfUUNa/buWs+LpXk
Malware Config
Signatures
Files
-
bbb225eaa2d1499a66697445d1a665a17d2cc58e4a0b50aa8bdee2dbf6d9f1f7.exe windows x86
5abe2327ca712af9d88afe49c68326c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrA
kernel32
GetSystemInfo
HeapSize
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetCurrentProcessId
ExitProcess
CreateFileW
GetModuleHandleA
Sleep
VirtualAlloc
GetTickCount
GetProcAddress
LoadLibraryA
GetTempPathA
GlobalAddAtomA
CreateProcessA
CopyFileA
lstrcatA
DeleteFileA
GetModuleFileNameA
GetLastError
lstrcpyA
GetModuleFileNameW
GetSystemTime
GetCommandLineA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetCPInfo
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
GetACP
GetOEMCP
LCMapStringA
user32
GetDesktopWindow
GetWindowLongA
GetActiveWindow
GetSystemMetrics
GetForegroundWindow
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ