Static task
static1
Behavioral task
behavioral1
Sample
bb45150c47e936c0ddd2bd150baa8b63b531a23d68b4f3a59b88f084262e12ab.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb45150c47e936c0ddd2bd150baa8b63b531a23d68b4f3a59b88f084262e12ab.exe
Resource
win10v2004-20221111-en
General
-
Target
bb45150c47e936c0ddd2bd150baa8b63b531a23d68b4f3a59b88f084262e12ab
-
Size
447KB
-
MD5
c32e1d456758c28c7b7dda363bdbccc4
-
SHA1
d1f06342bbfd049e1ecc3f5a36cd4394f65420ba
-
SHA256
bb45150c47e936c0ddd2bd150baa8b63b531a23d68b4f3a59b88f084262e12ab
-
SHA512
5cdc48bd6d1fddc23924348aae863f9e339600bb51d7ddd431bed6c2dd55c3c8b337945d83d5d9e394ebcbf8c9e5d6dc2b65cc0c7d6f2dccb07cfab92b2dd577
-
SSDEEP
12288:8Led0KFN9QlSD+qD67nUZ5hWa8eX26I6BZZUoc:87llSG7nA5hWa8eXjI6zZ4
Malware Config
Signatures
Files
-
bb45150c47e936c0ddd2bd150baa8b63b531a23d68b4f3a59b88f084262e12ab.exe windows x86
e4fd34b8d68122f348cd568b48de8d9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
Sleep
LockResource
GetDriveTypeA
RaiseException
GetACP
GlobalAddAtomA
InterlockedExchange
GlobalDeleteAtom
GlobalUnlock
VirtualProtect
HeapCreate
GetStdHandle
GlobalFree
EnterCriticalSection
SetErrorMode
CloseHandle
GetLocaleInfoA
LoadLibraryExA
SetConsoleOutputCP
GetLastError
user32
GetActiveWindow
DrawEdge
ShowWindow
ReleaseDC
SetForegroundWindow
EndPaint
GetWindowTextA
GetWindow
GetClassNameA
OemToCharA
GetParent
ValidateRect
GetCursorPos
BeginPaint
DrawTextA
GetMenuItemInfoA
ClipCursor
GetFocus
IsIconic
wtsapi32
WTSFreeMemory
WTSLogoffSession
WTSOpenServerA
WTSQueryUserToken
WTSCloseServer
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ