Static task
static1
Behavioral task
behavioral1
Sample
bbd0279d04e3a1c46dfe9f24608080877112b5497f907f91c1ade6236373b785.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbd0279d04e3a1c46dfe9f24608080877112b5497f907f91c1ade6236373b785.exe
Resource
win10v2004-20220812-en
General
-
Target
bbd0279d04e3a1c46dfe9f24608080877112b5497f907f91c1ade6236373b785
-
Size
7KB
-
MD5
4e04a7c941aeb5677c11e1971a3ed2a4
-
SHA1
4df6cec659acf81d9d39656b86b6590f0b015583
-
SHA256
bbd0279d04e3a1c46dfe9f24608080877112b5497f907f91c1ade6236373b785
-
SHA512
d05d1df0bdcd313a2564bc434a047eaa70befa8ee588d4c726eecb4eab255af8b9eec3b1e18211baadd16dabb40331e7332cac8b2bde558e3de3ed8557aa2cd4
-
SSDEEP
48:6lUXd03IN4QOX58evb7Y/i2rYP/8/8/lFBb0vibV9taOPouc9gTvLXMQJ85auWr6:7W8evQq2q/8/8/C4THguc9gTvALO2
Malware Config
Signatures
Files
-
bbd0279d04e3a1c46dfe9f24608080877112b5497f907f91c1ade6236373b785.exe windows x86
beb0621632fe338a6cef118bc30108ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
LoadLibraryW
msvcrt
memcpy
advapi32
RegOpenKeyExW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ