Static task
static1
Behavioral task
behavioral1
Sample
bbc4c208d04053114bfceeaf9dfcaf256ad3d5d2f6ec8d69faf8fd6aa04ef261.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bbc4c208d04053114bfceeaf9dfcaf256ad3d5d2f6ec8d69faf8fd6aa04ef261.exe
Resource
win10v2004-20220812-en
General
-
Target
bbc4c208d04053114bfceeaf9dfcaf256ad3d5d2f6ec8d69faf8fd6aa04ef261
-
Size
281KB
-
MD5
83cfbf9a8100af61554c86141909513c
-
SHA1
397af7d29028a96cd63a2ebf7f08f640a94bc328
-
SHA256
bbc4c208d04053114bfceeaf9dfcaf256ad3d5d2f6ec8d69faf8fd6aa04ef261
-
SHA512
8e79cbfeecfd9a47808789ee5c97eca8b9dc727ba8464918b0c29379e7bba8d91264f23bc35ec50443807ba7664adcd1eaa19e255f617405f1a7c64d4495f23b
-
SSDEEP
6144:8dTaa1zeXlkDwb23rcKGoqQR0Tb0KF9iDtLBgbk:8dWa1zeXlKwb23rcnqQbxF4DtL
Malware Config
Signatures
Files
-
bbc4c208d04053114bfceeaf9dfcaf256ad3d5d2f6ec8d69faf8fd6aa04ef261.exe windows x86
641309dfa7ce2a7b32a27d1c63d57ec7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDoubleClickTime
EndDeferWindowPos
ExitWindowsEx
IntersectRect
SetForegroundWindow
CheckRadioButton
SetFocus
RegisterClassExA
GetKeyNameTextA
GetWindowTextLengthA
GetClassInfoExA
CallWindowProcA
GetWindowLongA
GetCursorPos
GetFocus
AppendMenuA
SetClipboardData
DestroyWindow
SendMessageA
GetClipboardData
SendDlgItemMessageA
InflateRect
gdi32
TextOutA
Escape
CreatePatternBrush
CreateSolidBrush
GetBkColor
RectVisible
ole32
CoRegisterClassObject
CoRegisterSurrogate
CoInitialize
OleUninitialize
OleInitialize
shlwapi
SHDeleteKeyA
PathFindFileNameA
SHRegCloseUSKey
PathQuoteSpacesA
SHRegCreateUSKeyA
SHRegWriteUSValueA
kernel32
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
GetStringTypeW
GetOEMCP
GetACP
GetCPInfo
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapAlloc
Sleep
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
lstrcmpA
lstrcmpiA
QueryPerformanceCounter
GetWindowsDirectoryA
GetSystemTime
OpenProcess
GetVersionExA
GetModuleHandleA
GetDateFormatA
SizeofResource
LoadResource
CreateEventA
FileTimeToSystemTime
GetVersion
GetVolumeInformationA
CloseHandle
ReadFile
GetFileSize
SetEndOfFile
CreateFileA
DeleteCriticalSection
TlsGetValue
TlsAlloc
GetSystemInfo
ExpandEnvironmentStringsA
GetProfileStringW
VirtualProtect
AddAtomA
GetCommandLineA
HeapSetInformation
GetLastError
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
SetFilePointer
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
TlsSetValue
TlsFree
InterlockedIncrement
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE