Static task
static1
Behavioral task
behavioral1
Sample
bb33c1bce123c289043d28e397147a513171006b3b490c5642ec08ce062e6cd6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb33c1bce123c289043d28e397147a513171006b3b490c5642ec08ce062e6cd6.exe
Resource
win10v2004-20220812-en
General
-
Target
bb33c1bce123c289043d28e397147a513171006b3b490c5642ec08ce062e6cd6
-
Size
532KB
-
MD5
17f1abcf242e1ef04cc88e1abf0164b0
-
SHA1
3330e947a35fa93ee5f0c381e18304adf2b308d9
-
SHA256
bb33c1bce123c289043d28e397147a513171006b3b490c5642ec08ce062e6cd6
-
SHA512
4977233c74e4355db2b71d1f0458655546a857fe6257e82306c692dc213e6eb78196b61388b3f52bc75b72caa2775cf536452f639374e865b34cb6ccec6d6525
-
SSDEEP
12288:EVrImuDTVVsrtz6UB1FXWcEIYRSE1CXqU6D:Elr1LB1FXWcEIYRS9q
Malware Config
Signatures
Files
-
bb33c1bce123c289043d28e397147a513171006b3b490c5642ec08ce062e6cd6.exe windows x86
42a5485b2a1ad0e7c6fe9f4af8ebd25b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemInfoA
GetMessageA
GetDoubleClickTime
SetTimer
KillTimer
SetForegroundWindow
GetWindow
DefWindowProcA
CheckMenuRadioItem
IsDlgButtonChecked
SetMenuItemInfoA
PostMessageA
CheckDlgButton
GetDlgItem
CreatePopupMenu
LoadImageA
DestroyIcon
wsprintfA
AppendMenuA
GetCursorPos
TrackPopupMenu
InvalidateRect
PostQuitMessage
ShowWindow
WinHelpA
DestroyWindow
FindWindowA
LoadCursorA
RegisterClassA
RegisterWindowMessageA
RegisterDeviceNotificationA
UnregisterDeviceNotification
SetMenuDefaultItem
DestroyMenu
LoadStringA
IsDialogMessageA
CreateDialogParamA
DispatchMessageA
TranslateMessage
SendMessageA
kernel32
GetProcAddress
OpenFile
GlobalFree
FreeLibrary
DeviceIoControl
lstrcatA
LocalAlloc
GlobalAlloc
GlobalLock
lstrcmpA
GlobalUnlock
GlobalHandle
WinExec
CreateFileA
ExitProcess
lstrcmpiA
lstrcpyA
LoadLibraryA
lstrlenA
FormatMessageA
lstrcpynA
LocalFree
CloseHandle
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
shell32
Shell_NotifyIconA
ShellExecuteA
advapi32
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
winmm
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetDevCapsA
mixerGetNumDevs
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutMessage
mixerGetID
mixerClose
mixerOpen
mixerMessage
batmeter
CreateBatMeter
BatMeterCapabilities
UpdateBatMeter
DestroyBatMeter
powrprof
WriteGlobalPwrPolicy
EnumPwrSchemes
GetActivePwrScheme
ReadGlobalPwrPolicy
SetActivePwrScheme
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 500KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE