Static task
static1
Behavioral task
behavioral1
Sample
badd9e23f8c1ff589005f45f06ccc44ef13c25769c0216a95214994bb97442df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
badd9e23f8c1ff589005f45f06ccc44ef13c25769c0216a95214994bb97442df.exe
Resource
win10v2004-20220812-en
General
-
Target
badd9e23f8c1ff589005f45f06ccc44ef13c25769c0216a95214994bb97442df
-
Size
81KB
-
MD5
20617be4972aad4bd8a5fd3acaaa2a70
-
SHA1
d539df3003817f6324875f76f6897cf4ca3b700c
-
SHA256
badd9e23f8c1ff589005f45f06ccc44ef13c25769c0216a95214994bb97442df
-
SHA512
7434e48ee79b24753a835286edc89b2734340b226bdf426585c39ce03ea92d34483751389149faa5754271f11db251f04070d46076bac07d6765ec8cf6b33ad6
-
SSDEEP
1536:fIUopCkaRQuKKtDqqGUL5TSB7iRw1/sg5nJ:fIU8CbRQNKjGUL5OB7d5n
Malware Config
Signatures
Files
-
badd9e23f8c1ff589005f45f06ccc44ef13c25769c0216a95214994bb97442df.exe windows x86
d6f3fa475eb4b980b4db818cb85d4b53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsIconic
SendDlgItemMessageA
GetClientRect
AnyPopup
IsDialogMessageA
SetDlgItemInt
MessageBoxIndirectA
CascadeWindows
GetWindowThreadProcessId
DeferWindowPos
GetLastActivePopup
GetDlgItem
SetClipboardData
CreateWindowExA
LoadIconA
LoadCursorA
DispatchMessageA
ole32
OleQueryCreateFromData
CoCreateInstance
CreateDataAdviseHolder
CoMarshalInterface
StgCreateStorageEx
OleTranslateAccelerator
CoTaskMemRealloc
CoReleaseServerProcess
StringFromGUID2
ReadFmtUserTypeStg
StgIsStorageFile
MonikerCommonPrefixWith
OleCreateEx
OleCreateLinkFromData
CoTaskMemFree
comctl32
CreateStatusWindowW
CreatePropertySheetPageW
CreatePropertySheetPageA
InitializeFlatSB
ord5
ord13
InitCommonControlsEx
ord16
shlwapi
StrStrA
StrCmpNA
kernel32
GetModuleHandleA
GetProcAddress
VirtualAllocEx
GetStartupInfoA
avifil32
AVIPutFileOnClipboard
AVIStreamLength
AVIStreamOpenFromFileA
msvfw32
ICImageCompress
usp10
ScriptShape
ScriptString_pcOutChars
ScriptStringOut
ScriptBreak
ScriptString_pLogAttr
ScriptCacheGetHeight
ScriptXtoCP
ScriptStringFree
wsnmp32
ord200
setupapi
SetupGetStringFieldA
SetupDiInstallClassExW
SetupCommitFileQueueA
SetupRenameErrorW
SetupSetSourceListA
SetupQueueRenameSectionA
SetupGetSourceInfoA
msvcrt
_pctype
_isctype
__mb_cur_max
iswctype
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ