Static task
static1
Behavioral task
behavioral1
Sample
b4b88ba2cc9ce9c1b41b8b3cc7dfab99836b7d8e50cf5760c29f9c624de4abb5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4b88ba2cc9ce9c1b41b8b3cc7dfab99836b7d8e50cf5760c29f9c624de4abb5.exe
Resource
win10v2004-20220901-en
General
-
Target
b4b88ba2cc9ce9c1b41b8b3cc7dfab99836b7d8e50cf5760c29f9c624de4abb5
-
Size
192KB
-
MD5
8c28e625af029429715cdb8d046c234a
-
SHA1
c07c24fa461d4f8bce1f38efccef4675daf7d03e
-
SHA256
b4b88ba2cc9ce9c1b41b8b3cc7dfab99836b7d8e50cf5760c29f9c624de4abb5
-
SHA512
0792a0c67e4561162efbb57b40c87e106546cb52b429023281e8e919edd1c203274e6129e50088cd9f8d1c21c85d00662d57b176e2b09915c16855cc3a9566c2
-
SSDEEP
3072:V1JRvgl4Y96t/0/DJyk70FGdwYw/yjl9GtJMf9WEk0Q8TsM74f8fAU:V77xu9gl6jrGtJCa98t74f8f
Malware Config
Signatures
Files
-
b4b88ba2cc9ce9c1b41b8b3cc7dfab99836b7d8e50cf5760c29f9c624de4abb5.exe windows x86
11bea5347737ebbcb26d3f83287b27e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
CreateDIBitmap
CreateDIBSection
DeleteDC
ExtEscape
GetObjectA
SetStretchBltMode
CreateCompatibleBitmap
GetDIBits
GetStockObject
RealizePalette
CreateCompatibleDC
BitBlt
SelectObject
SelectPalette
StretchDIBits
CreateFontA
DeleteObject
GetDeviceCaps
SetBkMode
user32
GetParent
DefWindowProcA
EqualRect
SetWindowLongA
CreateDialogParamA
MsgWaitForMultipleObjects
GetQueueStatus
GetClassInfoExA
GetWindowLongA
SetFocus
DispatchMessageA
PeekMessageA
FindWindowA
EndPaint
SetTimer
DestroyWindow
wvsprintfA
DestroyAcceleratorTable
GetClassNameA
IsWindow
DrawTextA
SetCapture
LoadCursorA
EnumDisplayDevicesA
PostMessageA
RegisterWindowMessageA
InvalidateRgn
wsprintfA
GetActiveWindow
GetWindow
GetSysColor
GetWindowTextLengthA
CharNextA
KillTimer
SetRect
ShowWindow
MoveWindow
PostThreadMessageA
CallWindowProcA
FillRect
CopyRect
ReleaseDC
SendMessageA
InvalidateRect
GetDlgItem
GetWindowRect
BeginPaint
CreateAcceleratorTableA
GetDC
RedrawWindow
SendNotifyMessageA
GetClientRect
GetFocus
RegisterClassExA
GetDesktopWindow
IsChild
ReleaseCapture
CreateWindowExA
UnregisterClassA
SendMessageTimeoutA
GetWindowTextA
SetParent
SetWindowTextA
SetWindowPos
winmm
timeGetTime
timeSetEvent
wininet
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
advapi32
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
CryptEncrypt
CryptAcquireContextA
RegQueryInfoKeyA
CryptImportKey
RegEnumValueA
CryptCreateHash
CryptDestroyHash
RegCloseKey
CryptDestroyKey
CryptReleaseContext
RegSetValueExA
CryptGetHashParam
CryptHashData
RegDeleteValueA
RegDeleteKeyA
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
shell32
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
gdiplus
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipCreateBitmapFromFile
GdipAlloc
GdipFree
GdipGetImagePixelFormat
GdipCloneImage
kernel32
GetShortPathNameW
SetFilePointer
WideCharToMultiByte
CreateFileA
CreateFileW
GetProcessId
GlobalAlloc
GlobalSize
LocalFree
ReadFile
GlobalFree
LocalAlloc
UnmapViewOfFile
EnumResourceTypesA
GetFileAttributesA
GetTickCount
GetFileSize
MapViewOfFile
CreateFileMappingA
DisableThreadLibraryCalls
Sleep
WriteFile
CloseHandle
version
GetFileVersionInfoW
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
VerQueryValueA
shlwapi
PathFileExistsW
PathCombineW
ole32
StgOpenStorage
CoUninitialize
CoCreateInstance
CoTaskMemFree
GetRunningObjectTable
StgCreateDocfile
CoInitializeSecurity
CoInitialize
CreateItemMoniker
BindMoniker
OleInitialize
CoSetProxyBlanket
CreateBindCtx
CreateStreamOnHGlobal
CoGetClassObject
CoTaskMemAlloc
CoTaskMemRealloc
StgIsStorageFile
OleLockRunning
OleUninitialize
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ