Static task
static1
Behavioral task
behavioral1
Sample
bddd7dab312f70baa840681704f6f2e50185b20dc625a009c4dde1eed4f64d37.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bddd7dab312f70baa840681704f6f2e50185b20dc625a009c4dde1eed4f64d37.exe
Resource
win10v2004-20220812-en
General
-
Target
bddd7dab312f70baa840681704f6f2e50185b20dc625a009c4dde1eed4f64d37
-
Size
857KB
-
MD5
7b29f2a86b4fda78a908671b8c04ef79
-
SHA1
d95048c554dcb3526e69b33b6b178f73097fe0c9
-
SHA256
bddd7dab312f70baa840681704f6f2e50185b20dc625a009c4dde1eed4f64d37
-
SHA512
3ce3df3e5f684be3b3951b36c7e817a08dd5cc75a7fae4c3ba7f8bc79a06d16530d0eeec0c916550d0726c9dba39f6cc81b15bbdcc6e4d7dc1bbd59b891e7cd6
-
SSDEEP
24576:bf09nEigFFDjKhZFoGMQoWluSXlP7e3M:bfgETDirporSy
Malware Config
Signatures
Files
-
bddd7dab312f70baa840681704f6f2e50185b20dc625a009c4dde1eed4f64d37.exe windows x86
d917ad7b0502839bd8e6b78e724fec29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringW
SetEndOfFile
GetCommConfig
IsBadHugeWritePtr
WritePrivateProfileSectionW
GetDiskFreeSpaceA
UnhandledExceptionFilter
FreeEnvironmentStringsA
lstrcmpiA
WritePrivateProfileStructW
SetProcessShutdownParameters
GetExitCodeProcess
lstrcmpiW
SetVolumeLabelW
GetLocaleInfoA
EnumLanguageGroupLocalesA
DeleteVolumeMountPointA
IsProcessorFeaturePresent
SetMailslotInfo
FreeEnvironmentStringsW
GetVersionExA
GetPrivateProfileSectionA
GetSystemDefaultLangID
GetCurrentDirectoryW
CreateHardLinkW
GetTimeFormatA
InterlockedCompareExchange
SetEvent
GlobalAlloc
GetCurrencyFormatW
PurgeComm
SetLocaleInfoA
FindFirstVolumeW
FlushInstructionCache
WritePrivateProfileSectionA
SetPriorityClass
UnmapViewOfFile
OutputDebugStringA
GetStringTypeA
FindCloseChangeNotification
GetLocaleInfoW
SetEnvironmentVariableA
LocalCompact
FindFirstFileW
WaitCommEvent
BackupRead
CompareStringW
GetCommState
GetPrivateProfileStructA
FindNextVolumeMountPointA
LocalFileTimeToFileTime
GetLongPathNameW
FindAtomA
CommConfigDialogA
GetTimeFormatW
QueueUserWorkItem
GetStringTypeExA
VerifyVersionInfoA
SetErrorMode
FreeUserPhysicalPages
GetAtomNameW
GetTempPathA
SetThreadIdealProcessor
GetFileTime
MulDiv
GetThreadPriorityBoost
CreateFileMappingA
IsBadStringPtrW
VerSetConditionMask
ContinueDebugEvent
ReplaceFileA
SetNamedPipeHandleState
GetCompressedFileSizeW
SetTapePosition
DnsHostnameToComputerNameW
DeviceIoControl
lstrcpyW
GetModuleHandleW
FileTimeToSystemTime
GetPrivateProfileSectionW
SetHandleInformation
TlsSetValue
GetDateFormatA
GetComputerNameW
PrepareTape
GetFileInformationByHandle
WaitNamedPipeA
EnumDateFormatsExW
SetFileApisToOEM
ReadDirectoryChangesW
GetThreadLocale
GetCurrentDirectoryA
EnumResourceLanguagesW
FindResourceW
_hread
GlobalFix
ProcessIdToSessionId
LoadResource
LocalUnlock
GetFileAttributesExW
GetNumberFormatW
ResumeThread
_llseek
FoldStringW
SetLocalTime
CreateFileMappingW
GetCurrentThread
GetVolumeNameForVolumeMountPointW
lstrcpyA
CompareStringA
GetOverlappedResult
FileTimeToDosDateTime
SetCalendarInfoW
FlushViewOfFile
QueryPerformanceCounter
SearchPathA
ResetEvent
GetThreadPriority
GetSystemInfo
user32
DestroyWindow
CharUpperBuffW
TrackPopupMenuEx
ChildWindowFromPoint
CreateCaret
SetShellWindow
DlgDirListW
MessageBoxIndirectW
IsZoomed
GetGUIThreadInfo
SetSysColors
MsgWaitForMultipleObjects
CallWindowProcW
GetKeyState
LoadCursorFromFileW
TrackMouseEvent
GetWindowRgn
SetMenuItemInfoA
CopyImage
GetMessageA
GetLastInputInfo
EnableWindow
VkKeyScanA
CharLowerW
DdeGetData
shlwapi
PathAppendA
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 615KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ