Static task
static1
Behavioral task
behavioral1
Sample
bbf2716a1e2bef02af8f238342905b2ff73a68f4bcf966896590c62204bfd7cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbf2716a1e2bef02af8f238342905b2ff73a68f4bcf966896590c62204bfd7cf.exe
Resource
win10v2004-20220901-en
General
-
Target
bbf2716a1e2bef02af8f238342905b2ff73a68f4bcf966896590c62204bfd7cf
-
Size
22KB
-
MD5
bc0c1dfd18d6612e6834acb0aa25ec50
-
SHA1
6f37bb41c6498862c7edcd3ef38ab0dcd82f7804
-
SHA256
bbf2716a1e2bef02af8f238342905b2ff73a68f4bcf966896590c62204bfd7cf
-
SHA512
74aca9f6e2dacfdfa522b91b2e07dc25cd595798b3392c591a7a3823a06a2eaf7f10dafebac05291d6f864296c0e85cef0d1b89b253e933c59f742ec5caa85d1
-
SSDEEP
384:Bkl3w0kBjNzZpjYUpfEiw6Nv7EWqwQ1c6Pr+3TjYE0W:Bkl35kJNzZeUpfRBNj/tQH+
Malware Config
Signatures
Files
-
bbf2716a1e2bef02af8f238342905b2ff73a68f4bcf966896590c62204bfd7cf.exe windows x86
4d8ccef4e322e12ec43f159c3390c177
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetPriorityClass
GetCurrentProcess
CloseHandle
GetLastError
CreateMutexA
ExitProcess
WinExec
CopyFileA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
ResumeThread
CreateThread
Sleep
WriteFile
CreateFileA
lstrcatA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileExA
GetSystemDirectoryA
GlobalMemoryStatus
GetVersionExA
GetComputerNameA
GetCurrentProcessId
HeapAlloc
GetProcessHeap
RaiseException
InterlockedExchange
LocalAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
msvcp60
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
msvcrt
sprintf
malloc
printf
_stricmp
strstr
rand
__CxxFrameHandler
strcspn
strncpy
atoi
_strlwr
_itoa
Sections
.222 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.555 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.111/sec Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.111 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE