Static task
static1
Behavioral task
behavioral1
Sample
bbf9c67990845b69c51565ec7ff5453084b795684737803da11a540e9458860f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbf9c67990845b69c51565ec7ff5453084b795684737803da11a540e9458860f.exe
Resource
win10v2004-20221111-en
General
-
Target
bbf9c67990845b69c51565ec7ff5453084b795684737803da11a540e9458860f
-
Size
631KB
-
MD5
c3034b177a0a0425544b2e5f3e732565
-
SHA1
1898c3919200860d47ee9a99ff3a7ba0db770873
-
SHA256
bbf9c67990845b69c51565ec7ff5453084b795684737803da11a540e9458860f
-
SHA512
b88af25890b9fbc1e726544b02f539b670fe494891e1eb2ba06320f465b1f620430bf9456dc7efd3da7db6d3d95eb2754a4ef6e6091b63a67c3fb3553890cc66
-
SSDEEP
12288:I+PYWKU+jWhtlGTO724AGdzOlmZy/t7IOj9daUG1Mxk9PmVUBo6Lww5:I0YWcSht8672T4wIc9daUG119PCiJ5
Malware Config
Signatures
Files
-
bbf9c67990845b69c51565ec7ff5453084b795684737803da11a540e9458860f.exe windows x86
92e7c999f2ebc114ea672f7832779164
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
SetBkColor
SelectObject
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
kernel32
GetStdHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
GetModuleHandleA
GetVersion
GetCommandLineA
GetCurrentThreadId
GetLastError
ExitProcess
VirtualAlloc
Sleep
VirtualFree
HeapCreate
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
SizeofResource
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
lstrlenA
GetSystemInfo
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CompareStringA
GetCPInfo
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
TerminateProcess
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
HeapAlloc
IsDebuggerPresent
InterlockedDecrement
SetLastError
FormatMessageA
TlsGetValue
LocalFree
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetStdHandle
SetErrorMode
GetLocaleInfoA
user32
SendMessageA
InvalidateRect
IsWindowVisible
SystemParametersInfoA
GetSysColor
SetForegroundWindow
LoadIconA
LoadCursorA
CheckMenuItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetSystemMetrics
SetTimer
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
GetParent
DestroyWindow
GetDC
DispatchMessageA
IsWindow
SetWindowPos
Sections
.text Size: 600KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ