Static task
static1
Behavioral task
behavioral1
Sample
bda0dfe332e5ecba1fd6b28c2322b8f6fe5e93e36ab1ed6e2e8efeffe933ba33.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bda0dfe332e5ecba1fd6b28c2322b8f6fe5e93e36ab1ed6e2e8efeffe933ba33.exe
Resource
win10v2004-20220901-en
General
-
Target
bda0dfe332e5ecba1fd6b28c2322b8f6fe5e93e36ab1ed6e2e8efeffe933ba33
-
Size
832KB
-
MD5
168aaf533e65f127074f078c14dfdc30
-
SHA1
66f2b433f8428d279d17e19bf21f7699d50c64c8
-
SHA256
bda0dfe332e5ecba1fd6b28c2322b8f6fe5e93e36ab1ed6e2e8efeffe933ba33
-
SHA512
87480f9a07a2172b73fd71bfe97b2e3f95a92fc9933456defed0b7a6b7fd41e04eac58c5d6ba634260a2b9637b301576161bc5e44dbcf9ab9ac4c1dad2abb218
-
SSDEEP
6144:5A0gJtq9XKUDx4r21x5OyHlYvHr+uZUEyG/og3C4io/UBEWiDnCh5GPwGigp+NzU:5APJ4O0jOBDyml/ainaGPwmMvnf0
Malware Config
Signatures
Files
-
bda0dfe332e5ecba1fd6b28c2322b8f6fe5e93e36ab1ed6e2e8efeffe933ba33.exe windows x86
73ec795c6c369c6ce2c3b4c3f6477daa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 32KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3 Size: 48KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE