Static task
static1
Behavioral task
behavioral1
Sample
ba47bd775d0e3fc15ac7c82f7a6742fc038bc0e38b69a244bf2d5a1a89dce0d1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba47bd775d0e3fc15ac7c82f7a6742fc038bc0e38b69a244bf2d5a1a89dce0d1.exe
Resource
win10v2004-20220812-en
General
-
Target
ba47bd775d0e3fc15ac7c82f7a6742fc038bc0e38b69a244bf2d5a1a89dce0d1
-
Size
818KB
-
MD5
90b69d6b1290b4b7a7a3cfee1ac36379
-
SHA1
11fa71629fef3f368addfd5bc0e3d5dd9e801b90
-
SHA256
ba47bd775d0e3fc15ac7c82f7a6742fc038bc0e38b69a244bf2d5a1a89dce0d1
-
SHA512
9d882dec127c8c7a92f75cd1fe277641d0c4da93201828a90f9957d5d76ea7a4776156d0833b22041217db1c102001c15d54618ddd59cac76a980e032e8fcf6c
-
SSDEEP
24576:yXi7pT7fOx4S3edXqOgCSDUTjBtXSqtsmD:SiFHGx4S3eAVUzXSqtsq
Malware Config
Signatures
Files
-
ba47bd775d0e3fc15ac7c82f7a6742fc038bc0e38b69a244bf2d5a1a89dce0d1.exe windows x86
7f68c7f64206dbcf4c1b37b9abdc2723
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoInitialize
kernel32
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualFree
HeapCreate
CreateProcessA
SizeofResource
InterlockedExchange
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
UnmapViewOfFile
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
LockResource
GetEnvironmentStrings
GetCPInfo
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateEventW
WaitForMultipleObjects
FindNextFileA
CreateFileMappingA
ResetEvent
CompareStringA
lstrcpyA
FindFirstFileA
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
SetErrorMode
GetWindowsDirectoryA
CreateDirectoryA
GetFileSize
GetStartupInfoA
GetCurrentThreadId
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
LoadLibraryExW
SetCurrentDirectoryA
InterlockedIncrement
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
IsDebuggerPresent
GetCurrentThread
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
GetStringTypeA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetTickCount
GetCurrentProcessId
GetCommandLineA
GetLastError
GetVersion
LoadLibraryA
GetModuleFileNameW
user32
GetDlgItem
SetTimer
GetWindowLongA
SetWindowTextA
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
SetFocus
EndPaint
FillRect
CreateWindowExA
GetSubMenu
LoadStringA
EnableWindow
ShowWindow
GetParent
GetMessageA
DestroyWindow
SendMessageA
ReleaseDC
GetCursorPos
GetDC
PeekMessageA
DispatchMessageA
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
SetForegroundWindow
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
GetFocus
EndDialog
MessageBoxA
GetSysColor
SystemParametersInfoA
InvalidateRect
GetClientRect
SetCursor
gdi32
CreateCompatibleBitmap
CreateSolidBrush
SelectObject
BitBlt
SetBkColor
DeleteDC
GetStockObject
CreateCompatibleDC
DeleteObject
oleaut32
SysFreeString
VariantInit
SysStringLen
VariantClear
Sections
.text Size: 787KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ