Init
Static task
static1
Behavioral task
behavioral1
Sample
bbb3c27d8ae13c00c85f795dae433cd59ddb326145978962442848590d1715c7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bbb3c27d8ae13c00c85f795dae433cd59ddb326145978962442848590d1715c7.dll
Resource
win10v2004-20221111-en
General
-
Target
bbb3c27d8ae13c00c85f795dae433cd59ddb326145978962442848590d1715c7
-
Size
56KB
-
MD5
5ac61d2f66d4a5351ba11c3f784e320c
-
SHA1
a4f77402b6627070520b24d68ad32f537d3177ea
-
SHA256
bbb3c27d8ae13c00c85f795dae433cd59ddb326145978962442848590d1715c7
-
SHA512
ac69033bdd4fc3e2cb3945ed888848f8b6b336d680756c9a052b1caa0b402948fea372fe71a52dfa99c469dfc2fe80792cbc21b97041ae21bef0f143029e821a
-
SSDEEP
384:/6Obhh8O+OsxKtCshuUtSiTf3Urn1kftLPe14Bne35F0vmLgadVu9:C2+tKtCsMUtdD36kftLP1Be35F0Obu9
Malware Config
Signatures
Files
-
bbb3c27d8ae13c00c85f795dae433cd59ddb326145978962442848590d1715c7.dll windows x86
8616cc5c78fbd1f9e8d51e8168a65ecc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitProcess
GetModuleFileNameA
Sleep
WaitForMultipleObjects
GetDriveTypeA
GetLogicalDriveStringsA
CloseHandle
WriteFile
GetFileSize
SetFilePointer
GetPrivateProfileStringA
GetCurrentProcessId
CreateThread
UnmapViewOfFile
MapViewOfFile
GetLastError
VirtualFree
VirtualAlloc
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalSize
SetFileAttributesA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetCurrentProcess
ResumeThread
SuspendThread
TerminateThread
user32
GetWindowThreadProcessId
GetForegroundWindow
GetClassNameA
msvcrt
free
_ltoa
_strlwr
_strcmpi
strlen
atol
strchr
_except_handler3
sprintf
strcpy
strstr
strrchr
memcpy
memset
strcat
_strupr
realloc
wcslen
wcscmp
malloc
rand
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ