Static task
static1
Behavioral task
behavioral1
Sample
bb3c520b18e8181092f01df7b2e615697d0edf78abdb0375f0e25ff817525114.exe
Resource
win7-20220901-en
General
-
Target
bb3c520b18e8181092f01df7b2e615697d0edf78abdb0375f0e25ff817525114
-
Size
70KB
-
MD5
95362b84b76c44472a012a322fb4ff27
-
SHA1
9d6db34b2f4ba632ce9b46dcb5406e96af4de114
-
SHA256
bb3c520b18e8181092f01df7b2e615697d0edf78abdb0375f0e25ff817525114
-
SHA512
10e5fb8df08365429f0a7be5d273f163c2b76b22c167c83b1473b00f0db8d0b7c3b0b393e15066285337e9720a597e3e31a4c6ce7446dc0b43bbff560d84fe31
-
SSDEEP
1536:F5XbSpzPF6ucLQMVwwf7kKdLuOl2k3yu4RyS5x3HmWgSrC:F1Sp5GK07tdipyyx3JlrC
Malware Config
Signatures
Files
-
bb3c520b18e8181092f01df7b2e615697d0edf78abdb0375f0e25ff817525114.exe windows x86
3a0657dd310c0183215c56db28720943
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fseek
ftell
fread
sprintf
fabs
ceil
malloc
floor
free
fclose
strlen
strcpy
strncpy
strcat
_stricmp
_CIpow
_CIatan2
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetProcAddress
FreeLibrary
LoadLibraryA
InitializeCriticalSection
TlsAlloc
GetVersionExA
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
user32
GetPropA
RemovePropA
FillRect
GetIconInfo
DrawStateA
GetParent
GetClientRect
SendMessageA
InvalidateRect
CallWindowProcA
SetPropA
SetWindowLongA
DestroyWindow
ShowWindow
IsZoomed
GetWindowLongA
MoveWindow
ShowCursor
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadCursorA
DestroyIcon
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
gdi32
GetObjectType
GetObjectA
DeleteObject
IntersectClipRect
GetStockObject
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
CreateStatusWindowA
InitCommonControlsEx
winmm
timeEndPeriod
ole32
RevokeDragDrop
CoInitialize
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 863B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE