Static task
static1
Behavioral task
behavioral1
Sample
bdebc7d4b1caf5f66fdc9da3ceb98783cd863b2f12e5168a49f90cf888063f58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdebc7d4b1caf5f66fdc9da3ceb98783cd863b2f12e5168a49f90cf888063f58.exe
Resource
win10v2004-20221111-en
General
-
Target
bdebc7d4b1caf5f66fdc9da3ceb98783cd863b2f12e5168a49f90cf888063f58
-
Size
293KB
-
MD5
d47d68dafff65efdf71a37e47654f326
-
SHA1
db912f77e4b5343ba4cb10f6e3c8db6b27699479
-
SHA256
bdebc7d4b1caf5f66fdc9da3ceb98783cd863b2f12e5168a49f90cf888063f58
-
SHA512
7f4995e0992614967d81bfed7ac597a0e0e23900426c794f17dd5b416170f68130593ccccd364ebaf22718bcc2d1e632b86c1153b5400321aac4806b98b1dbf1
-
SSDEEP
6144:TFgkhXkhPfxSkE3pG8Hc52S/iRnX6jXKTRC9ZKG1eFca5YAiG32ldA5HyCM:BaEkSpHI2SwX6jXKTuaGlD+D
Malware Config
Signatures
Files
-
bdebc7d4b1caf5f66fdc9da3ceb98783cd863b2f12e5168a49f90cf888063f58.exe windows x86
ff90041ba071de6bfc991245f3082f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowTextA
GetLastActivePopup
SetWindowPos
GetWindowThreadProcessId
GetDlgItem
DeferWindowPos
GetDesktopWindow
GetWindowTextA
CreateWindowExA
GetForegroundWindow
ole32
CoIsHandlerConnected
gdi32
CloseEnhMetaFile
CopyMetaFileW
EnumObjects
AbortDoc
CreateEllipticRgn
GetBkColor
CreateCompatibleBitmap
DeleteMetaFile
DeleteDC
ChoosePixelFormat
DrawEscape
ExtCreateRegion
advapi32
RegDeleteValueA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegSaveKeyA
urlmon
CreateAsyncBindCtxEx
kernel32
GetProfileStringA
WritePrivateProfileStringA
WriteProfileSectionA
GetProfileSectionA
GetProcAddress
LCMapStringA
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetProfileIntA
msvcrt
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_exit
_XcptFilter
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ