Static task
static1
Behavioral task
behavioral1
Sample
bbde5c7da072068adf254f3b989eababc9473bda9a7daa15e3702fa4062d5a89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbde5c7da072068adf254f3b989eababc9473bda9a7daa15e3702fa4062d5a89.exe
Resource
win10v2004-20221111-en
General
-
Target
bbde5c7da072068adf254f3b989eababc9473bda9a7daa15e3702fa4062d5a89
-
Size
556KB
-
MD5
05048e855da6c6fbf5fe13130ffe45bf
-
SHA1
838beed9b64fbf5ee2ff0e45489c1113560f567b
-
SHA256
bbde5c7da072068adf254f3b989eababc9473bda9a7daa15e3702fa4062d5a89
-
SHA512
bdb7e2d08f6f1712b0cba683589f78b6b13d496fbaffcc9d5b4cd8d012bc995f764bd5c945bae36168db17233c1c5f2bcd9c7c32fec199199ceb106c038a067c
-
SSDEEP
12288:FlsF6vOQ1QFDJ6fh9cK90+pQRaQD2HibMUEiIlQblxl3Ewn2c/T:js2OQmFF6h9cKi+WRaq2HibMU9IlQbqq
Malware Config
Signatures
Files
-
bbde5c7da072068adf254f3b989eababc9473bda9a7daa15e3702fa4062d5a89.exe windows x86
9c9a1cca1561783d449b1e77d2a56ce7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassInfoExW
MapWindowPoints
RegisterClassA
GetMenuDefaultItem
CreateWindowStationW
SetWindowsHookExA
SendDlgItemMessageW
GetMenuItemCount
RegisterClassExA
DdeImpersonateClient
GetMenuCheckMarkDimensions
CopyAcceleratorTableW
SetForegroundWindow
CharToOemBuffW
DlgDirSelectExA
CheckMenuItem
TranslateAccelerator
GetSysColorBrush
NotifyWinEvent
CreateIconFromResource
ToAsciiEx
DdeFreeDataHandle
LoadIconW
GetMessageW
PeekMessageW
SetUserObjectInformationW
GetGuiResources
EnumWindowStationsW
DrawTextW
MessageBoxW
IsWindowVisible
DdeInitializeA
DlgDirListW
TrackPopupMenu
ChangeClipboardChain
IsDlgButtonChecked
LoadImageW
CharUpperBuffA
DestroyWindow
DdeFreeStringHandle
ShowWindow
EnumPropsA
DispatchMessageW
DefWindowProcW
SetCaretPos
DrawFocusRect
CreateWindowExA
GetClassInfoW
CascadeWindows
DdeNameService
DdeCreateStringHandleW
MonitorFromWindow
GetSystemMetrics
GetMonitorInfoA
GetLastActivePopup
DdeAbandonTransaction
PostThreadMessageW
IsClipboardFormatAvailable
CopyAcceleratorTableA
TranslateMessage
SetWindowTextA
kernel32
GetSystemTime
GetNamedPipeHandleStateW
IsBadWritePtr
AddAtomA
VirtualAlloc
ResetEvent
SetHandleCount
InterlockedIncrement
GetACP
OpenSemaphoreW
VirtualQuery
GetTimeZoneInformation
SetLastError
GetCommandLineA
GetTempPathA
CompareStringW
DeleteFileW
FreeEnvironmentStringsA
GlobalFlags
GetOEMCP
GetLastError
SetStdHandle
CreateMutexA
HeapCreate
HeapAlloc
TerminateThread
VirtualFree
SetFilePointer
GetEnvironmentStrings
GetDriveTypeW
FlushFileBuffers
SetThreadIdealProcessor
GetDateFormatA
ReadFile
GetProcAddress
GetCPInfo
LCMapStringW
InterlockedExchange
LeaveCriticalSection
GetStringTypeW
IsDebuggerPresent
OpenMutexA
EnterCriticalSection
CompareStringA
DeleteCriticalSection
GetVersion
SetEnvironmentVariableA
QueryPerformanceCounter
TlsSetValue
HeapReAlloc
UnhandledExceptionFilter
OutputDebugStringA
HeapDestroy
GetNumberFormatA
AllocConsole
TlsAlloc
SetConsoleMode
CreateNamedPipeA
GetCurrentProcess
GetEnvironmentStringsW
FindAtomW
GetModuleFileNameA
IsBadReadPtr
WaitForDebugEvent
WriteConsoleOutputW
HeapFree
GetCurrentProcessId
GetLocalTime
GetStartupInfoA
LCMapStringA
SetConsoleCtrlHandler
MultiByteToWideChar
GetCurrentThread
WideCharToMultiByte
GetSystemTimeAsFileTime
RtlUnwind
GetDateFormatW
TlsFree
GetFileType
GetStdHandle
WriteFile
GlobalHandle
CloseHandle
InitializeCriticalSection
TlsGetValue
GetCurrentThreadId
DebugBreak
ExitProcess
LoadLibraryA
FreeEnvironmentStringsW
LocalFileTimeToFileTime
InterlockedDecrement
GetModuleHandleA
GetTickCount
GetStringTypeA
GetProfileIntA
TerminateProcess
HeapValidate
MapViewOfFile
comctl32
ImageList_AddIcon
DrawStatusTextA
CreateStatusWindowA
ImageList_AddMasked
InitCommonControlsEx
ImageList_DrawEx
ImageList_Duplicate
ImageList_GetImageInfo
DestroyPropertySheetPage
ImageList_GetImageCount
shell32
SHGetSpecialFolderPathW
DragQueryFileAorW
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ