Static task
static1
Behavioral task
behavioral1
Sample
bb0f225e58695cd915d6404040ad863e547e2d14239a46d5b18ba4043f9b19a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb0f225e58695cd915d6404040ad863e547e2d14239a46d5b18ba4043f9b19a8.exe
Resource
win10v2004-20220812-en
General
-
Target
bb0f225e58695cd915d6404040ad863e547e2d14239a46d5b18ba4043f9b19a8
-
Size
666KB
-
MD5
66a74ba679bca40cbc0fb272ef65f7f0
-
SHA1
badf1d88655e90e70ba2ebd4aa8e0d4b47f3e501
-
SHA256
bb0f225e58695cd915d6404040ad863e547e2d14239a46d5b18ba4043f9b19a8
-
SHA512
539e437608007fa53c313b310cd972ba9b0677d4a04713dfc4f67e5b4c105828c78dd55924668ecc28aa49be4d14b57a7e91bdb09b89a526fcbc852ec1686bed
-
SSDEEP
12288:qbCw8Lx0Kd2ac26dfL9N2wD6Hj/jH7GRYnLsuZ:qbC/kfxN5Dm7GRYt
Malware Config
Signatures
Files
-
bb0f225e58695cd915d6404040ad863e547e2d14239a46d5b18ba4043f9b19a8.exe windows x86
e339061835e663319cc4575cc521b91b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
DestroyWindow
DrawTextW
CreateCursor
DestroyCursor
GetDlgItemInt
FlashWindowEx
GetClipboardData
DestroyCaret
ClientToScreen
GetClassNameW
DestroyAcceleratorTable
CloseClipboard
CreateCaret
DialogBoxIndirectParamW
DrawIcon
GetCursorPos
EndDeferWindowPos
GetDesktopWindow
EnableMenuItem
GetDCEx
DestroyIcon
DeferWindowPos
PostMessageW
CreatePopupMenu
GetActiveWindow
FrameRect
GetDlgItemTextW
DrawFocusRect
CreateDialogParamW
CharLowerW
GetDlgCtrlID
CreateMenu
DrawFrameControl
ChangeClipboardChain
kernel32
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
HeapReAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetLastError
lstrcpyW
CreateDirectoryW
HeapFree
lstrcatW
CloseHandle
GetProcessHeap
HeapAlloc
GetModuleHandleW
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
comctl32
ord17
ImageList_Create
Sections
.text Size: 511KB - Virtual size: 511KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ