Static task
static1
Behavioral task
behavioral1
Sample
bbad8a1c1f32932e4c4213f254944c712b6bab5b423e8b876926545946ff24ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbad8a1c1f32932e4c4213f254944c712b6bab5b423e8b876926545946ff24ba.exe
Resource
win10v2004-20221111-en
General
-
Target
bbad8a1c1f32932e4c4213f254944c712b6bab5b423e8b876926545946ff24ba
-
Size
115KB
-
MD5
d67060038444def3cd8a723a432340ed
-
SHA1
0ecd6dc5b178776226363e3be314e2da43b6e945
-
SHA256
bbad8a1c1f32932e4c4213f254944c712b6bab5b423e8b876926545946ff24ba
-
SHA512
e9c2734f6861835ab428e6ac00d9bac955491f4b4b2cda2cb71ccca68fc629abd9777d1410876f079a067216cd390d1c61af7c98b8f2762ef7acc6ae56fc3ad4
-
SSDEEP
3072:EOmRYNoo2+X58h6VvNsjYZahXbL5MRV+zJXaDnBfm1zzkYl2Ph2VMR:SRYiz058h2mjckMRV+dXa1uAQVMR
Malware Config
Signatures
Files
-
bbad8a1c1f32932e4c4213f254944c712b6bab5b423e8b876926545946ff24ba.exe windows x86
cd40fc8b114bf63dcaf874cc07b32f80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
DeleteFileA
VirtualFree
GetCurrentProcess
Sleep
ExitProcess
Sections
.text Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Wftca Ys Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Mydws. C Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Njbmernj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE