Static task
static1
Behavioral task
behavioral1
Sample
ba72caf65926d8009e9604e1710cd1e2216f8e7926116a865284954570114800.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba72caf65926d8009e9604e1710cd1e2216f8e7926116a865284954570114800.exe
Resource
win10v2004-20221111-en
General
-
Target
ba72caf65926d8009e9604e1710cd1e2216f8e7926116a865284954570114800
-
Size
46KB
-
MD5
b6656bdb28f9dc378887bd983b8d9c81
-
SHA1
c9251bb5a5d01cd38de9ca4ef590d8f5b2aaaa16
-
SHA256
ba72caf65926d8009e9604e1710cd1e2216f8e7926116a865284954570114800
-
SHA512
4e8a1eba9928d0c6c5590a8b3e61332cbda6fb6dc821e3808ab8c23630f63cabf84e1f450e4a161bd9eeed7dc0cff9e353262db4d2dce9e4db7b7d1eb78c0455
-
SSDEEP
768:a+TuEnMX3HuQ8p/BjEqEXceq+pDWHlQfxbmN:aBRX3DkB1Wceq+EAtmN
Malware Config
Signatures
Files
-
ba72caf65926d8009e9604e1710cd1e2216f8e7926116a865284954570114800.exe windows x86
06ae4e42f0a6c2c5f8b79341d6e50c9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ReleaseMutex
WriteProcessMemory
CreateFileA
SleepEx
WaitForSingleObjectEx
ReadProcessMemory
GetSystemTime
TerminateProcess
LoadLibraryExA
WaitForSingleObject
GetProcAddress
LoadLibraryA
VirtualProtect
FreeConsole
LoadLibraryA
GetSystemTimeAsFileTime
LoadLibraryExW
TerminateProcess
ReleaseMutex
WaitForSingleObject
Sleep
WaitForSingleObject
LoadLibraryExW
LoadLibraryA
winmm
DrvGetModuleHandle
GetDriverModuleHandle
GetDriverModuleHandle
GetDriverModuleHandle
timeGetDevCaps
OpenDriver
timeGetDevCaps
GetDriverModuleHandle
DrvGetModuleHandle
DrvGetModuleHandle
waveOutReset
OpenDriver
GetDriverModuleHandle
OpenDriver
DrvGetModuleHandle
timeGetDevCaps
DrvGetModuleHandle
timeGetDevCaps
OpenDriver
GetDriverModuleHandle
Sections
.text Size: 32KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ