Static task
static1
Behavioral task
behavioral1
Sample
bbc89c4f7b56c6c7291f23327fcd050a22c3960d2a1b47bceb4ebbf70f080bea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbc89c4f7b56c6c7291f23327fcd050a22c3960d2a1b47bceb4ebbf70f080bea.exe
Resource
win10v2004-20220812-en
General
-
Target
bbc89c4f7b56c6c7291f23327fcd050a22c3960d2a1b47bceb4ebbf70f080bea
-
Size
184KB
-
MD5
a69c05a72ced87c82911545b2e5e632b
-
SHA1
c590d9303922c06a12d134b994763e8e4d90ace6
-
SHA256
bbc89c4f7b56c6c7291f23327fcd050a22c3960d2a1b47bceb4ebbf70f080bea
-
SHA512
3e70583898a29741e6146c86eea74cd2e752bf0faab56626a2245a0ae3f4cb26b2ed5094960bedb4f58aac192c8cd20165d7a72f7fd11a36cc67c62559637c6e
-
SSDEEP
3072:C64AVAyVXjd5Ag1VphBz6tqK8JqY6vHYVcnfg0CPQ:C657jdDr2YvJv+fCo
Malware Config
Signatures
Files
-
bbc89c4f7b56c6c7291f23327fcd050a22c3960d2a1b47bceb4ebbf70f080bea.exe windows x86
6f539562e64ce70f9ac5d99e0d9dab7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
log
memcpy
malloc
memmove
kernel32
FindFirstFileA
lstrlenA
CreateThread
LoadLibraryA
CreateEventA
GetModuleFileNameA
GetUserDefaultLCID
SetEvent
GlobalDeleteAtom
GetACP
SetThreadLocale
FreeResource
SetLastError
GetLocaleInfoA
GetCurrentThreadId
LocalAlloc
GetModuleHandleA
GetFileType
GetVersion
GetCurrentProcess
lstrcpyA
GetStdHandle
SetEndOfFile
GetCurrentThread
ExitProcess
GetDiskFreeSpaceA
MulDiv
GetFullPathNameA
HeapFree
GetOEMCP
GetStringTypeW
VirtualAllocEx
EnterCriticalSection
ExitThread
SizeofResource
MoveFileExA
GetCommandLineA
FindResourceA
Sleep
MoveFileA
ResetEvent
DeleteCriticalSection
GetCurrentProcessId
SetHandleCount
EnumCalendarInfoA
GetTickCount
GlobalAlloc
DeleteFileA
FreeLibrary
VirtualQuery
GetVersionExA
WriteFile
GetStartupInfoA
InitializeCriticalSection
GetCPInfo
lstrcmpiA
VirtualFree
lstrcatA
RaiseException
SetErrorMode
GetStringTypeA
GetEnvironmentStrings
LoadLibraryExA
FindClose
GetProcessHeap
GetDateFormatA
lstrcpynA
user32
TrackPopupMenu
EnableMenuItem
GetDCEx
CharLowerBuffA
CreatePopupMenu
DefMDIChildProcA
GetScrollPos
SystemParametersInfoA
MessageBoxA
GetSubMenu
SetWindowTextA
IsChild
EndPaint
FindWindowA
IsMenu
DrawIcon
BeginDeferWindowPos
IsWindowVisible
FillRect
GetCursor
CheckMenuItem
GetDC
GetLastActivePopup
GetFocus
EnumChildWindows
DrawFrameControl
EndDeferWindowPos
ClientToScreen
DrawIconEx
GetMenuStringA
EnumWindows
GetMessagePos
GetKeyState
CreateIcon
DispatchMessageA
SetWindowLongA
GetMenuItemInfoA
GetParent
GetClipboardData
GetDesktopWindow
CallWindowProcA
GetMenu
GetMenuItemCount
SetTimer
BeginPaint
ShowWindow
GetClassLongA
GetWindowTextA
DrawTextA
ShowScrollBar
GetActiveWindow
GetClassInfoA
GetClientRect
CharToOemA
CharLowerA
DefFrameProcA
CreateMenu
GetCursorPos
EqualRect
CreateWindowExA
GetKeyNameTextA
EnableScrollBar
comctl32
ImageList_Destroy
ImageList_DrawEx
ImageList_Draw
ImageList_Read
ImageList_Remove
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE