Static task
static1
Behavioral task
behavioral1
Sample
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e.exe
Resource
win10v2004-20220812-en
General
-
Target
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e
-
Size
528KB
-
MD5
a22fb2c054bcfbb7af5bd339767f1110
-
SHA1
e815ca38fcab15594c7c6dd3a52eaf3daaf48eb9
-
SHA256
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e
-
SHA512
5d31b2a0e80d1efd18fe79b41615c1f35718e2de0ea5dcf04208d74a297d3d7a9e353629e6d619c3ca6d66c38a4bf58ffc6472370f6413cef5ddc07083a469ab
-
SSDEEP
3072:ZJd0q2IOzLKOeNW0BosbiexLUbVmRvKAga/B6NT7vVoQEliXgys+3zZdcu:fqnbeNZouPWbVmxK+/BiT7vzKi3s+
Malware Config
Signatures
Files
-
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e.exe windows x86
94ca1290b69bc7117844110f40da5d62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
UnmapViewOfFile
_lopen
DeleteFileA
lstrcpynA
_lwrite
GetWindowsDirectoryA
_lread
LockResource
SystemTimeToFileTime
SetFileTime
CreateFileA
WriteFile
CloseHandle
ReadFile
GetSystemTime
_lclose
MapViewOfFile
GetCommandLineA
CreateFileMappingA
GetSystemDirectoryA
GetModuleFileNameA
LoadLibraryA
GetVersionExA
GetProcAddress
FreeLibrary
GetTempPathA
lstrcmpA
lstrcpyA
SizeofResource
lstrcatA
FindResourceA
_lcreat
LoadResource
LocalAlloc
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
ExitProcess
HeapCreate
GetVersion
GetStartupInfoA
GetModuleHandleA
HeapFree
GetACP
GetOEMCP
GetCPInfo
SetHandleCount
GetEnvironmentStringsW
GetFileType
GetStdHandle
HeapAlloc
lstrlenA
user32
DrawTextExA
GetWindowTextA
InflateRect
SetWindowTextA
SetWindowLongA
LoadIconA
SetRect
GetClientRect
GetMessageTime
SetWindowRgn
GetDlgItemTextA
MoveWindow
MessageBeep
SetActiveWindow
GetWindow
GetDesktopWindow
RegisterClassA
UnregisterClassA
ModifyMenuA
DestroyMenu
TrackPopupMenu
AppendMenuA
GetSubMenu
InvertRect
EndPaint
GetWindowRect
GetWindowLongA
FillRect
CopyRect
OffsetRect
DrawTextA
SetFocus
EndDialog
GetCursorPos
LoadCursorA
CharUpperA
FindWindowA
SetForegroundWindow
PostMessageA
GetForegroundWindow
CreateWindowExA
LoadImageA
DialogBoxParamA
TranslateMessage
DispatchMessageA
GetMessageA
ReleaseCapture
SetCapture
ClientToScreen
wsprintfA
CreateDialogParamA
ShowWindow
MessageBoxA
ExitWindowsEx
GetDC
SetDlgItemTextA
PtInRect
BeginPaint
LoadMenuA
CheckDlgButton
ReleaseDC
SendMessageA
EnableWindow
CheckRadioButton
GetDialogBaseUnits
SetWindowPos
WinHelpA
GetDlgItem
GetSystemMetrics
DefWindowProcA
GetSysColor
DestroyWindow
PostQuitMessage
LoadBitmapA
DrawEdge
GetSysColorBrush
DrawStateA
SetCursor
CreateDialogIndirectParamA
gdi32
AddFontResourceA
SelectObject
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
CreateSolidBrush
SetTextColor
GetBkColor
SetBkMode
SetBkColor
BitBlt
CreateCompatibleDC
DeleteDC
LineTo
MoveToEx
GetObjectA
TextOutA
CreatePolygonRgn
CreatePen
EnumFontFamiliesA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CoCreateInstance
CoInitialize
comctl32
ord17
Sections
pec1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE