Static task
static1
Behavioral task
behavioral1
Sample
bd67e49c2ca15156c54956655928723063eca5b4d90ae22dd6ce1029ba596b35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd67e49c2ca15156c54956655928723063eca5b4d90ae22dd6ce1029ba596b35.exe
Resource
win10v2004-20221111-en
General
-
Target
823e6ec59140043e4e850e4016018a77.bin
-
Size
274KB
-
MD5
d98085316361be27e760074d229b83f8
-
SHA1
7febab86f3607f2d9f2ca5925db3f3fcb1b2a73a
-
SHA256
8355d03ce881e5c5e765e01ab55b7a084208311d94fd160dd197a2ca2783ad48
-
SHA512
d0fa2015e4e7ccca512208ff97271cb04c6da7d17f3a9cfcbee919e6363451b0f7640a47aab708a6ccb11ef38e3e410ee84c239940e3017740f53908d7496bd8
-
SSDEEP
3072:lDqDNu0lBasj2IwFPS+ldeuOy4T1YALCJvmlKVUUS9tY4QmWbK5TZl1RZ3klbjcL:clVj2ZOPTGAeYFVbhWb8ZlojcLNBDiO
Malware Config
Signatures
Files
-
823e6ec59140043e4e850e4016018a77.bin.zip
Password: infected
-
bd67e49c2ca15156c54956655928723063eca5b4d90ae22dd6ce1029ba596b35.exe.exe windows x64
Password: infected
fbfcf00c38af43c32deb15a93d741895
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ord17
user32
BeginPaint
EnableWindow
SetTimer
KillTimer
SendDlgItemMessageA
PostQuitMessage
IsDlgButtonChecked
GetDlgItemInt
EndDialog
DefWindowProcA
DialogBoxParamA
CreateWindowExA
RegisterClassExA
LoadCursorA
PostMessageA
EndPaint
GetWindowLongPtrA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
MessageBoxA
MessageBoxW
GetDlgItem
ShowWindow
InvalidateRect
GetClientRect
SetDlgItemTextA
SetDlgItemInt
LoadIconA
gdi32
TextOutA
SetTextColor
SetBkMode
Ellipse
CreateSolidBrush
CreatePen
SelectObject
Rectangle
kernel32
SetFilePointerEx
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
HeapSize
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
CloseHandle
CreateFileW
WriteConsoleW
IsValidCodePage
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xuH Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE