Static task
static1
Behavioral task
behavioral1
Sample
bb21820f2c9f16a1513a6f48b0b7a1e959575a32eacd7477415fe72d76b6c410.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb21820f2c9f16a1513a6f48b0b7a1e959575a32eacd7477415fe72d76b6c410.exe
Resource
win10v2004-20220812-en
General
-
Target
bb21820f2c9f16a1513a6f48b0b7a1e959575a32eacd7477415fe72d76b6c410
-
Size
296KB
-
MD5
23daf1a150a35f1c01e610661602c720
-
SHA1
34d8ea5964428e62e5e0c10765b1b0faab1e2fb7
-
SHA256
bb21820f2c9f16a1513a6f48b0b7a1e959575a32eacd7477415fe72d76b6c410
-
SHA512
bccf60addcc687ef4437b048cc57f6298dbd8c20b1ddf0d5d9f3d07d82fd8d0b22bcdc3933dcc0eec20e5249e36cd17c999aee0b6032f9559cb6941456e38335
-
SSDEEP
6144:4cor/BuzrDXP3PHBfP3HLp3PHouTPHcNLJlDs9HFhwuV/ytUQOnLH0R1TA9ZKL/d:4F5uzrD/3PHBfP3HLp3PHouwhHDs9lh2
Malware Config
Signatures
Files
-
bb21820f2c9f16a1513a6f48b0b7a1e959575a32eacd7477415fe72d76b6c410.exe windows x86
b2d496723bd1e9612dede02475ff5241
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
FindResourceA
GetDiskFreeSpaceA
CreateEventW
GetStringTypeW
ReadConsoleA
LoadLibraryA
lstrcatW
Heap32Next
GetPrivateProfileIntA
SetConsoleTitleW
InterlockedDecrement
DeviceIoControl
Heap32First
lstrcpyW
CloseHandle
ReadFileEx
SetEnvironmentVariableA
HeapCreate
GetDiskFreeSpaceA
GetModuleHandleA
adsldpc
ADsDeleteDSObject
ADsCloseSearchHandle
ADsCreateDSObject
ADsEnumClasses
shell32
SHFree
SHGetDiskFreeSpaceA
DragQueryFileA
DllUnregisterServer
DragAcceptFiles
ShellAboutA
ExtractIconA
DuplicateIcon
FreeIconList
SHGetSettings
ShellMessageBoxW
FindExecutableA
StrChrA
uxtheme
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ