Static task
static1
Behavioral task
behavioral1
Sample
bb443585f36e8461f9639bd7c0713261ee3ffbb189c8a156f2ebc94fa7236381.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb443585f36e8461f9639bd7c0713261ee3ffbb189c8a156f2ebc94fa7236381.exe
Resource
win10v2004-20220812-en
General
-
Target
bb443585f36e8461f9639bd7c0713261ee3ffbb189c8a156f2ebc94fa7236381
-
Size
30KB
-
MD5
6d47bed73f107b8e669f0482c097a543
-
SHA1
c2bf84fc1427d81a87ed470fca50fecd44d23ee3
-
SHA256
bb443585f36e8461f9639bd7c0713261ee3ffbb189c8a156f2ebc94fa7236381
-
SHA512
4df557a49769194e36840f2d2223beb047f0ac83dbd1b78dca05521a77ea4ea92ddcb431ce2c32d9cc8839151be47cc17ecd9df5750e5a87437452139d5f9b33
-
SSDEEP
768:XxkTA919auHOuw0hSE+IQ68miEDNnTSt8:Xx19bOuPSItZG8
Malware Config
Signatures
Files
-
bb443585f36e8461f9639bd7c0713261ee3ffbb189c8a156f2ebc94fa7236381.exe windows x86
18d43634a60144a87b61951c12028cb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
ShellExecuteExW
kernel32
GetSystemTime
GetVersionExW
HeapAlloc
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent
GetStdHandle
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
LoadLibraryW
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
user32
MessageBoxW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE