Static task
static1
Behavioral task
behavioral1
Sample
bb1b46d464a90fc2e1b36ca851a92e7e7df00b91e4b53c6b8fe58e4fc36e2847.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb1b46d464a90fc2e1b36ca851a92e7e7df00b91e4b53c6b8fe58e4fc36e2847.exe
Resource
win10v2004-20221111-en
General
-
Target
bb1b46d464a90fc2e1b36ca851a92e7e7df00b91e4b53c6b8fe58e4fc36e2847
-
Size
221KB
-
MD5
55e30994748b07811b7e66aa62172c06
-
SHA1
8d232ac51470057158eb5fc052ffae6abc0e4db5
-
SHA256
bb1b46d464a90fc2e1b36ca851a92e7e7df00b91e4b53c6b8fe58e4fc36e2847
-
SHA512
48be24a5e347f93dd3e537fac045e860a2e9413b0984aae47d93d949257b9420bc23f7e13aca53ba594a8604125d8500a07cf6c5108b05b7407a9af5ad410107
-
SSDEEP
6144:mDcWYlPwcRxza8x5pKXP+1NtABsrbAA8Lib:pplIcRxzaQ5pM+GQskb
Malware Config
Signatures
Files
-
bb1b46d464a90fc2e1b36ca851a92e7e7df00b91e4b53c6b8fe58e4fc36e2847.exe windows x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.pelock Size: 161KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE