Static task
static1
Behavioral task
behavioral1
Sample
bdbbb9ef286a4cbe23ccfa5d9bcb57eaacd7e80886dcba236228b152a1765759.exe
Resource
win7-20220812-en
General
-
Target
bdbbb9ef286a4cbe23ccfa5d9bcb57eaacd7e80886dcba236228b152a1765759
-
Size
2.8MB
-
MD5
e6861970b4c66a6cdcb693c668edba33
-
SHA1
addf57f625a917ba77d6e433b754718c735a6e67
-
SHA256
bdbbb9ef286a4cbe23ccfa5d9bcb57eaacd7e80886dcba236228b152a1765759
-
SHA512
b0b4d885c6dd9c0534b716d69a15355d31c0776c137e17b8c16e7954059a8bf9d5b88ac5c9a6779de5c3731e80ebead9ea7b7c49e7cdd77b791fd79c6028f484
-
SSDEEP
49152:KKLvfc5hKTijlmyuB3iPtCTdu7f89d29InuV6b4gV:7wIiydcf89d29In
Malware Config
Signatures
Files
-
bdbbb9ef286a4cbe23ccfa5d9bcb57eaacd7e80886dcba236228b152a1765759.exe windows x86
17e0425f6e888cc0b019ce293e449830
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
LeaveCriticalSection
AddVectoredExceptionHandler
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexA
GetModuleHandleExW
GetFileAttributesA
SystemTimeToFileTime
EnterCriticalSection
LocalFileTimeToFileTime
GetLastError
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
CloseHandle
DeleteCriticalSection
GetTempPathA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
SetLastError
InitializeCriticalSection
GetTickCount
Sleep
FileTimeToSystemTime
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetEndOfFile
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
advapi32
RegQueryInfoKeyW
RegCreateKeyExW
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegEnumValueA
RegOpenKeyExW
user32
PostMessageA
CreateWindowExA
DefWindowProcW
GetDesktopWindow
MessageBoxA
PostQuitMessage
RegisterClassExW
SendMessageA
RegisterWindowMessageA
PeekMessageW
GetMessageA
SendMessageW
FindWindowW
LoadIconA
SetForegroundWindow
SetWindowPos
AppendMenuW
GetDlgItem
TrackPopupMenu
RedrawWindow
GetMessageW
LoadIconW
UpdateWindow
MsgWaitForMultipleObjects
AppendMenuA
RegisterWindowMessageW
GetWindowTextW
DestroyWindow
RegisterClassExA
PeekMessageA
SetFocus
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ