Static task
static1
Behavioral task
behavioral1
Sample
bb28b64a153633c8786372a08a2a0a1d732b3c2420b467c1fd153a4ee20d052b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb28b64a153633c8786372a08a2a0a1d732b3c2420b467c1fd153a4ee20d052b.exe
Resource
win10v2004-20221111-en
General
-
Target
bb28b64a153633c8786372a08a2a0a1d732b3c2420b467c1fd153a4ee20d052b
-
Size
717KB
-
MD5
b3c3e952015264bd669717951dfbae87
-
SHA1
951ba3542dd047a76b397cc54e7984b5c7bdbd4a
-
SHA256
bb28b64a153633c8786372a08a2a0a1d732b3c2420b467c1fd153a4ee20d052b
-
SHA512
ba52cb5cdfe8e87fd57458639418f7ab18d0affff8a1ee2e3890aec0c2a1d46963097743d70ba5762e4419d81587872845f1c6851b4379f1873e7533d6fc8bab
-
SSDEEP
12288:yZMoOicdpWJlMBQWIoqCiL9kjpYg9UkcEwrsBz0uiOcr1zBVc04:yZMwnMtIo/iL9kjn9UWrBzMOcr11W
Malware Config
Signatures
Files
-
bb28b64a153633c8786372a08a2a0a1d732b3c2420b467c1fd153a4ee20d052b.exe windows x86
b5b603b3637b40d7c7e070abcee4c3f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
lstrcpyA
Sleep
lstrlenA
GetTickCount
CloseHandle
GetLastError
CreateEventA
LocalAlloc
FreeLibrary
GetModuleHandleA
GetVersionExA
GlobalFree
lstrcatA
GlobalAlloc
GetStartupInfoA
GetFileSize
LocalFree
user32
TranslateMessage
DefWindowProcA
EndDialog
SetWindowTextA
MessageBoxA
SetFocus
DestroyWindow
GetMessageA
PostQuitMessage
DialogBoxParamA
GetWindowRect
GetClientRect
EndPaint
CreateWindowExA
msvcrt
_exit
wcschr
_acmdln
memmove
wcslen
_c_exit
_XcptFilter
__getmainargs
__setusermatherr
_controlfp
wcstoul
__p__fmode
__set_app_type
__p__commode
__CxxFrameHandler
_initterm
_adjust_fdiv
_except_handler3
rand
toupper
gdi32
GetTextExtentPoint32A
GetPixel
GetDeviceCaps
PatBlt
GetBkColor
GetTextColor
ExtTextOutA
CreateCompatibleDC
GetObjectA
CreateFontIndirectA
CreateSolidBrush
GetStockObject
SetBkMode
SetROP2
GetTextMetricsA
SelectObject
LineTo
DeleteObject
BitBlt
MoveToEx
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 695KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ