Static task
static1
Behavioral task
behavioral1
Sample
2bee3a3ceb23fa292fa07085f3cb9d0775df64dd2b195cf95ed156b171d97db7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2bee3a3ceb23fa292fa07085f3cb9d0775df64dd2b195cf95ed156b171d97db7.exe
Resource
win10v2004-20220812-en
General
-
Target
2bee3a3ceb23fa292fa07085f3cb9d0775df64dd2b195cf95ed156b171d97db7
-
Size
1.3MB
-
MD5
b294238b7c85d695a6bfb0782b2daf3e
-
SHA1
13ff65d812d86b5abfac69f264bdd9b005608136
-
SHA256
2bee3a3ceb23fa292fa07085f3cb9d0775df64dd2b195cf95ed156b171d97db7
-
SHA512
c861878df0134cf30f02be12a595fa6b1e67139a3dafec02d47f882686c9a6f397994cac6fdfdb40182877726b9f4afb270b2eb7a43a425c3fe17200538f1a4c
-
SSDEEP
24576:FbsE+zNzNa4xyMu2JmDuUukTfvp+VX0kAjLTWb1W5CNcjbcaiKuVF:q/zNbyMfkuU+F0cb45CNcjbcaiKuVF
Malware Config
Signatures
Files
-
2bee3a3ceb23fa292fa07085f3cb9d0775df64dd2b195cf95ed156b171d97db7.exe windows x86
19e9518a4306080f7b612380b27c746d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
ExitProcess
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetStartupInfoA
GetVersion
GetProcAddress
IsBadReadPtr
GetTickCount
RemoveDirectoryA
GlobalLock
lstrcmpiA
SetFileAttributesA
GetBinaryTypeW
FindResourceA
TerminateThread
ResumeThread
LeaveCriticalSection
GlobalUnlock
ReleaseMutex
SizeofResource
GetTimeZoneInformation
GetSystemDirectoryW
VirtualProtect
GetDateFormatA
SetCurrentDirectoryA
SearchPathA
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
VirtualFree
GetStringTypeW
user32
CreateCaret
GetSystemMetrics
SetWindowLongW
CheckMenuRadioItem
SetWindowPos
CharLowerBuffW
SetCursor
GetWindowLongW
DefWindowProcW
ReleaseDC
DestroyMenu
AppendMenuW
DefWindowProcA
GetClassInfoExW
BeginPaint
DrawTextA
MoveWindow
SendMessageTimeoutA
GetSubMenu
GetWindowLongA
GetSystemMenu
GetClientRect
EndPaint
DestroyWindow
RegisterClassExW
DrawIcon
CreateWindowExA
gdi32
SetViewportOrgEx
DeleteDC
SetMapMode
CreateBrushIndirect
Escape
EnumFontsA
ScaleViewportExtEx
CreateFontIndirectW
GetDeviceCaps
SetViewportExtEx
DeleteObject
OffsetViewportOrgEx
Ellipse
advapi32
RegCloseKey
RegOpenKeyW
LookupPrivilegeValueW
IsValidSid
RegEnumValueA
RegCreateKeyExA
AllocateAndInitializeSid
OpenEventLogW
RegDeleteValueW
RegQueryValueExA
RegEnumValueW
RegEnumKeyA
LookupPrivilegeDisplayNameW
RegDeleteKeyA
oleaut32
SetErrorInfo
GetErrorInfo
Sections
.text Size: 892KB - Virtual size: 891KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s1bbd2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ