Static task
static1
Behavioral task
behavioral1
Sample
bb03dcea42c2369fd494973ad730fd24744eb740adbd127053ba1b4cdd6fe404.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb03dcea42c2369fd494973ad730fd24744eb740adbd127053ba1b4cdd6fe404.exe
Resource
win10v2004-20220812-en
General
-
Target
bb03dcea42c2369fd494973ad730fd24744eb740adbd127053ba1b4cdd6fe404
-
Size
265KB
-
MD5
713556d8df815d8a84490284fc98b7cb
-
SHA1
982635c12bec2ee0b2ce433114c7ac910acd94bc
-
SHA256
bb03dcea42c2369fd494973ad730fd24744eb740adbd127053ba1b4cdd6fe404
-
SHA512
a5bddadd7cdadd95958977a7956d1da9a96878ef63b23180de88af105ab0d60bf9ac9443a7fca4a74cb239d0dff81f36427d0ed5356a4c4bd325d89fd1f7e113
-
SSDEEP
6144:kNiU5dL835YgJxyY2ZYXTy1G86ELPw2Z5ompbidxHbdZvGQU:C5dL835YgTn2ZYDy1xVPTxidxHTvGQ
Malware Config
Signatures
Files
-
bb03dcea42c2369fd494973ad730fd24744eb740adbd127053ba1b4cdd6fe404.exe windows x86
8564ce19c988c729abf1b2e5935001f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
WaitForSingleObject
CreateSemaphoreW
EnumDateFormatsExA
ReleaseSemaphore
GetCommandLineW
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
GetCurrentThreadId
FoldStringW
GetLocaleInfoW
Sleep
oleaut32
SafeArrayDestroyDescriptor
SafeArrayCreateEx
QueryPathOfRegTypeLib
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 175KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ