Static task
static1
Behavioral task
behavioral1
Sample
bd3338393e68e6e3e8d7cffaa10e764eea777fc0e2f7714679f60955374fe268.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bd3338393e68e6e3e8d7cffaa10e764eea777fc0e2f7714679f60955374fe268.exe
Resource
win10v2004-20220901-en
General
-
Target
bd3338393e68e6e3e8d7cffaa10e764eea777fc0e2f7714679f60955374fe268
-
Size
367KB
-
MD5
06289f5657b908c44fba61a879e5e940
-
SHA1
8b1b971bebbcf02f266f85f076c0f73cacd21f76
-
SHA256
bd3338393e68e6e3e8d7cffaa10e764eea777fc0e2f7714679f60955374fe268
-
SHA512
0046e6e149ee443448077d733c0e0b9490a3cfe17b99838ea4ac36e881e94fe04bee4647268755e2bb61b79af9d795d979efa5dd559f4481b6a3aa288e9c2438
-
SSDEEP
6144:89MAaUtCXs5OmIJ5K6zfmvrx8azC2j3qMcFxMGSc:09IXs/a5iD/W2j3qVOc
Malware Config
Signatures
Files
-
bd3338393e68e6e3e8d7cffaa10e764eea777fc0e2f7714679f60955374fe268.exe windows x86
3b97582638104c07783938819e95d973
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetCPInfo
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetACP
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
HeapAlloc
FreeEnvironmentStringsW
GetOEMCP
HeapCreate
IsValidCodePage
LoadLibraryW
HeapReAlloc
LCMapStringW
GetStringTypeW
GetLastError
QueryPerformanceCounter
MultiByteToWideChar
GetCurrentProcess
EnumDateFormatsA
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcAddress
InterlockedDecrement
GetCurrentThreadId
SetLastError
WideCharToMultiByte
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
user32
CreateAcceleratorTableA
IsWindow
CreateDialogParamW
DestroyWindow
ScrollWindowEx
SetScrollInfo
GetClientRect
OffsetRect
GetFocus
SetWindowTextA
SendMessageW
GetSysColor
wsprintfW
DrawTextExW
GetWindowLongA
IsRectEmpty
GetMenuCheckMarkDimensions
FillRect
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItem
EnableWindow
LoadImageA
InvalidateRect
BeginPaint
SendMessageA
EndPaint
DefWindowProcA
IsWindowEnabled
DestroyIcon
gdi32
BitBlt
SelectObject
GetWindowOrgEx
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetBkMode
SaveDC
SetBkColor
ExtTextOutA
RestoreDC
CreateCompatibleDC
CreateRectRgn
GetObjectA
DeleteDC
advapi32
OpenThreadToken
RegSetKeySecurity
shell32
SHGetDesktopFolder
ole32
CoCreateInstance
CoInitialize
odbc32
ord72
ord107
ord75
ord19
ord12
ord24
msimg32
GradientFill
shlwapi
PathFileExistsA
comctl32
ImageList_ReplaceIcon
ImageList_DrawIndirect
dbghelp
EnumerateLoadedModules
sensapi
IsNetworkAlive
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ