Static task
static1
Behavioral task
behavioral1
Sample
bb11f51ce6e93d86dd63ae41a95269261280bfa387a219b3fa9b5e54b75da48a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb11f51ce6e93d86dd63ae41a95269261280bfa387a219b3fa9b5e54b75da48a.exe
Resource
win10v2004-20221111-en
General
-
Target
bb11f51ce6e93d86dd63ae41a95269261280bfa387a219b3fa9b5e54b75da48a
-
Size
704KB
-
MD5
0698d325aa651d32789d8aa0c73836e1
-
SHA1
4eb934ba92bdb9da2b92496e812166f82f05f88a
-
SHA256
bb11f51ce6e93d86dd63ae41a95269261280bfa387a219b3fa9b5e54b75da48a
-
SHA512
c166a105c29da1f6601e13963a5bf1e1661ddeac11349ad487865f0a892510480ab42939da9c5db718e33ac4573c9b156829cdd44e2591464ca392dc68e4c3da
-
SSDEEP
12288:h1Wa3zhG9loGUDI2VZlbD9KuwwUAZ6ipNSydEx5k1N4RZfnTvMZP9NqCM4NgxR:uN9loBpb/WwUAU2dEfwN4RZvzyP/qqy
Malware Config
Signatures
Files
-
bb11f51ce6e93d86dd63ae41a95269261280bfa387a219b3fa9b5e54b75da48a.exe windows x86
9ad8d7ea97d1d2840b94c7195e811ec4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetVersionExA
GlobalHandle
GetStdHandle
LocalAlloc
UnhandledExceptionFilter
GetFileAttributesW
SetConsoleCP
GlobalLock
CloseHandle
VirtualProtect
GetOEMCP
Sleep
GetStartupInfoA
GetSystemInfo
ExitProcess
GetModuleHandleA
InterlockedExchange
CreateMutexA
HeapAlloc
GetLastError
OutputDebugStringA
HeapReAlloc
InterlockedIncrement
LoadLibraryExA
GlobalFree
SetStdHandle
CreateFileA
GetConsoleOutputCP
VirtualAlloc
FormatMessageA
InterlockedCompareExchange
GetACP
GetVersion
GlobalMemoryStatus
user32
SetWindowPos
TranslateMessage
GetMessageW
SendDlgItemMessageA
MessageBoxW
ValidateRect
GetMessagePos
msvcrt
qsort
_CxxThrowException
strncmp
??2@YAPAXI@Z
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 513KB - Virtual size: 969KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ