Static task
static1
Behavioral task
behavioral1
Sample
bd0683eba89cd5b8924f9054bf4f7686e18833f3bd5403c6848b17d9bf402a2b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bd0683eba89cd5b8924f9054bf4f7686e18833f3bd5403c6848b17d9bf402a2b.exe
Resource
win10v2004-20220812-en
General
-
Target
bd0683eba89cd5b8924f9054bf4f7686e18833f3bd5403c6848b17d9bf402a2b
-
Size
160KB
-
MD5
69e7dd70c281f4847ce7454608c22c65
-
SHA1
cf056f04d9c73ee342827413096bea4b27ed6853
-
SHA256
bd0683eba89cd5b8924f9054bf4f7686e18833f3bd5403c6848b17d9bf402a2b
-
SHA512
204713f8c4be5f1d0c82e3515444e8e0aefda639893fe44851f6f8b704673fc6945d277c32660087bd1f463da9e6b7c5adb3baabfce32a7343a8ae91fa375fe3
-
SSDEEP
3072:jZfBsquDi/v1gRtH0DnK1DfcqWI1u/yX6QbwS:jzsquDbHUnK1bcfgw
Malware Config
Signatures
Files
-
bd0683eba89cd5b8924f9054bf4f7686e18833f3bd5403c6848b17d9bf402a2b.exe windows x86
f80125fc7d895730bcc3b25ea4c7a1f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA
RegLoadKeyA
user32
SetWindowLongA
DrawMenuBar
CreateIcon
GetMenu
CheckMenuItem
EnumChildWindows
EqualRect
RegisterClassA
EnableWindow
CreatePopupMenu
BeginPaint
IsMenu
GetDCEx
IsChild
DefWindowProcA
DrawEdge
GetSubMenu
GetFocus
GetCapture
GetActiveWindow
ClientToScreen
comctl32
ImageList_Destroy
msvcrt
wcsncmp
atol
log10
exit
mbstowcs
memmove
malloc
wcstol
calloc
memcmp
clock
strcmp
exp
sprintf
memcpy
swprintf
wcschr
sqrt
oleaut32
OleLoadPicture
SafeArrayGetUBound
RegisterTypeLib
GetErrorInfo
kernel32
SetEndOfFile
HeapFree
GetStringTypeA
LocalFree
GetCurrentProcess
LoadLibraryExA
GetLastError
lstrcpynA
lstrcmpiA
GetCPInfo
GetCurrentProcessId
GetCurrentThread
FreeLibrary
ExitThread
GetVersionExA
VirtualAllocEx
ExitProcess
LoadLibraryA
GetModuleHandleA
GlobalAlloc
shlwapi
PathFileExistsA
PathGetCharTypeA
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA
version
GetFileVersionInfoSizeA
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE