WJXCHa
Static task
static1
Behavioral task
behavioral1
Sample
bbd5744a15448be776b8b532bfa8264d17d0fdece5d792c548a98724a7c478f1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbd5744a15448be776b8b532bfa8264d17d0fdece5d792c548a98724a7c478f1.exe
Resource
win10v2004-20220812-en
General
-
Target
bbd5744a15448be776b8b532bfa8264d17d0fdece5d792c548a98724a7c478f1
-
Size
130KB
-
MD5
6f9baeb0efa9afa873540f6bbd52b08f
-
SHA1
47b47b122502e409a1e0f6654d871bb0f3653bd1
-
SHA256
bbd5744a15448be776b8b532bfa8264d17d0fdece5d792c548a98724a7c478f1
-
SHA512
b8696b8f43a70100303187461b92295ab6a598d150c33e5077131feec323f43a5c9181d34ce47ef2c8fc089ad21d3b21c94e5120e817419df94eabe1cd5139e2
-
SSDEEP
3072:GYMYxmDqzxB2wJPNrwjWeqp399gCmAQ2wjZ/p:bIO8wJFrwnqpzPmAQ2wFh
Malware Config
Signatures
Files
-
bbd5744a15448be776b8b532bfa8264d17d0fdece5d792c548a98724a7c478f1.exe windows x86
26b89cb93a1d5e01816b204a92df71f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
VirtualQuery
GetModuleHandleA
WaitForSingleObject
VirtualAllocEx
LocalAlloc
InitializeCriticalSection
GetFileSize
WideCharToMultiByte
GetCPInfo
HeapFree
WriteFile
GlobalAddAtomA
GetDiskFreeSpaceA
LoadLibraryA
GetCommandLineW
ExitProcess
CompareStringA
GetACP
CloseHandle
GetEnvironmentStrings
SetEndOfFile
user32
DispatchMessageW
GetSysColorBrush
RedrawWindow
ShowScrollBar
EnumThreadWindows
GetKeyboardState
GetSysColor
GetKeyboardLayoutList
GetParent
GetIconInfo
GetKeyState
SetWindowLongW
LoadKeyboardLayoutA
GetLastActivePopup
IsCharLowerA
IntersectRect
IsWindowVisible
DefFrameProcA
PostQuitMessage
WaitMessage
DrawEdge
SetWindowPlacement
EnumChildWindows
InvalidateRect
GetMessagePos
ScreenToClient
GetMenu
OpenIcon
IsDialogMessageW
GetClipboardData
CharUpperBuffA
GetWindowLongW
DispatchMessageA
ReleaseDC
EnumWindows
CreatePopupMenu
DefWindowProcA
IsDlgButtonChecked
OpenClipboard
FillRect
DrawFrameControl
SetCursor
RemovePropA
IsChild
ReleaseCapture
UnhookWindowsHookEx
ShowWindow
GetKeyboardLayoutNameA
OemToCharA
PeekMessageW
GetSystemMetrics
GetKeyNameTextA
GetKeyboardLayout
UpdateWindow
LoadBitmapA
IsWindowUnicode
EmptyClipboard
GetWindowTextLengthA
DrawAnimatedRects
CreateIcon
ShowOwnedPopups
ClientToScreen
ActivateKeyboardLayout
ole32
CLSIDFromString
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CoCreateGuid
MkParseDisplayName
PropVariantClear
CoGetObjectContext
CoRegisterClassObject
CoGetMalloc
CoTaskMemFree
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 99KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ