Static task
static1
Behavioral task
behavioral1
Sample
bd96328d4d748e73fb16c051ce85415764f0d398fb038d30bb4e0616dafb613f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd96328d4d748e73fb16c051ce85415764f0d398fb038d30bb4e0616dafb613f.exe
Resource
win10v2004-20220812-en
General
-
Target
bd96328d4d748e73fb16c051ce85415764f0d398fb038d30bb4e0616dafb613f
-
Size
352KB
-
MD5
f5ddd715379d583798410e3e63e05f7d
-
SHA1
b5740bed9a8adab6ead4c4cd0c1f96176972026c
-
SHA256
bd96328d4d748e73fb16c051ce85415764f0d398fb038d30bb4e0616dafb613f
-
SHA512
e0bba201bff0bf5fcbf88650241f322b3b6776b4d8457c125e3dc310d6013e7814907f9ccf8b0367f69fd9afa1d8cb6590f621cf9b53a38baaf52d9a21bf90bb
-
SSDEEP
6144:OT7S9bJp6B8G0GGIEYvgxuLyUFAdXc6j6ZiWXCULRRnWuU6p2Xr7:aS9Fp7G0GEYI4LyU2sG6ZbX7Rn7X0r7
Malware Config
Signatures
Files
-
bd96328d4d748e73fb16c051ce85415764f0d398fb038d30bb4e0616dafb613f.exe windows x86
b74ed7fe0e2d06f2906d10d6724c8362
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
SetEnvironmentVariableA
GetCurrentThread
LoadLibraryA
EnterCriticalSection
QueryPerformanceCounter
GetProcessHeap
GetStartupInfoW
HeapSize
GetTimeZoneInformation
GetTickCount
VirtualFree
GetEnvironmentStringsA
OpenMutexA
ReadFile
SetLastError
GetModuleFileNameA
GetOEMCP
LCMapStringA
GetACP
GetStringTypeW
InitializeCriticalSection
WriteConsoleW
GetStartupInfoA
VirtualAlloc
HeapDestroy
InterlockedIncrement
GetModuleHandleA
IsValidCodePage
FreeEnvironmentStringsW
GetLocaleInfoA
CreateFileA
GetVersionExA
GetUserDefaultLCID
SetConsoleCtrlHandler
LocalFlags
WideCharToMultiByte
MultiByteToWideChar
TlsGetValue
GetCommandLineA
GetTimeFormatA
HeapCreate
LCMapStringW
DeleteCriticalSection
InterlockedExchange
GetEnvironmentStrings
GetCommandLineW
SetHandleCount
CompareStringA
GetModuleFileNameW
GetSystemTimeAsFileTime
GetStringTypeA
CreateMutexA
SetStdHandle
WriteConsoleA
TlsFree
CompareStringW
HeapAlloc
ExitProcess
GetProcAddress
SetUnhandledExceptionFilter
RtlUnwind
GetLastError
InterlockedDecrement
FlushFileBuffers
IsValidLocale
VirtualQuery
SetFilePointer
FreeEnvironmentStringsA
IsDebuggerPresent
HeapFree
GetConsoleCP
GetEnvironmentStringsW
EnumSystemLocalesA
Sleep
GetStdHandle
GetConsoleOutputCP
HeapReAlloc
GetCurrentThreadId
TerminateProcess
TlsAlloc
GetCPInfo
GetDateFormatA
GetCurrentProcessId
GetDateFormatW
LeaveCriticalSection
UnhandledExceptionFilter
GetLocaleInfoW
FreeLibrary
TlsSetValue
WriteFile
GetConsoleMode
CloseHandle
GetCurrentProcess
comctl32
ImageList_EndDrag
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_LoadImage
DrawStatusTextW
ImageList_Destroy
ImageList_SetFilter
DrawStatusTextA
CreateStatusWindow
InitMUILanguage
ImageList_SetBkColor
ImageList_Add
ImageList_SetFlags
ImageList_DrawEx
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_GetIconSize
CreatePropertySheetPage
MakeDragList
ImageList_Draw
InitCommonControlsEx
user32
DrawFrame
CopyAcceleratorTableA
CreateIcon
DestroyWindow
ExitWindowsEx
CheckDlgButton
SetWindowContextHelpId
MessageBoxW
SetDeskWallpaper
OemToCharBuffA
CreateWindowExW
InsertMenuW
SendIMEMessageExA
DefWindowProcW
RegisterClassA
GetMenuState
ChangeDisplaySettingsA
RegisterClassExA
SetWindowsHookA
SetWindowsHookExA
ShowWindow
GetLastActivePopup
CreateIconFromResourceEx
SetUserObjectInformationW
FindWindowA
SetCaretPos
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ