bongo[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bongo.exe
Size

1.7MB
MD5

6a8d68ddf261a3f4c31561bea6372c48
SHA1

063ffe69147d00575c8d53ec5b865380ffa9f025
SHA256

b239b1502095ac926e86a038f8825440402bf695006f6cc25c334620911f759b
SHA512

ba101e0894b0fa072c61d043fe853debc1d9badf518b9d51cd513ca4142db29649a9d49c6625991ce1f3dbb8929646cf58ac22517f40f832cfcbe36aa5e11e7c
SSDEEP

24576:669pQjLhD57ZB+mllAk8X1xY/gD1OQbc+dAKpiP:DpGDLwWlAk8X1xYGbc

Score

1^/10

Malware Config

Signatures

Files

bongo.exe
.exe windows x64

b28aca141250670dbe29e6941efa1b07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

gdi32

ChoosePixelFormat
CreateBitmap
CreateDIBSection
DeleteObject
DescribePixelFormat
GetDeviceCaps
GetPixelFormat
SetPixelFormat
SwapBuffers

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetVersion
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_assert
_beginthreadex
_cexit
_endthreadex
_errno
_filelengthi64
_fileno
_fmode
_fstat64
_hypot
_initterm
_lseeki64
_onexit
_setjmp
_strnicmp
_ultoa
_wfopen
abort
calloc
clock
exit
fclose
feof
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwrite
getc
getwc
islower
isspace
isupper
iswctype
isxdigit
localeconv
malloc
mbtowc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strstr
strtol
strtoul
strxfrm
tolower
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
wctomb
longjmp
_write
_strdup
_read
_fileno
_fdopen

opengl32

glBindTexture
glBlendFunc
glClear
glClearColor
glColorPointer
glCopyTexSubImage2D
glDeleteTextures
glDisable
glDisableClientState
glDrawArrays
glEnable
glEnableClientState
glFlush
glGenTextures
glGetError
glGetIntegerv
glGetString
glGetTexImage
glIsEnabled
glLoadIdentity
glLoadMatrixf
glMatrixMode
glPopAttrib
glPopClientAttrib
glPopMatrix
glPushAttrib
glPushClientAttrib
glPushMatrix
glTexCoordPointer
glTexImage2D
glTexParameteri
glTexSubImage2D
glVertexPointer
glViewport
wglCreateContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
wglShareLists

user32

AdjustWindowRect
CallWindowProcW
ChangeDisplaySettingsW
ClipCursor
CopyIcon
CreateIcon
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
EnumDisplayDevicesA
EnumDisplaySettingsA
EnumDisplaySettingsW
FlashWindowEx
GetCapture
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
LoadCursorW
MapVirtualKeyW
MapWindowPoints
MessageBoxA
PeekMessageW
RegisterClassW
RegisterDeviceNotificationW
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetCursor
SetForegroundWindow
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
TrackMouseEvent
TranslateMessage
UnregisterClassW

winmm

joyGetDevCapsW
joyGetPosEx
timeBeginPeriod
timeEndPeriod
timeGetDevCaps

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b28aca141250670dbe29e6941efa1b07

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

opengl32

user32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 13KB - Virtual size: 12KB

.rdata Size: 109KB - Virtual size: 108KB

.pdata Size: 62KB - Virtual size: 62KB

.xdata Size: 96KB - Virtual size: 95KB

.bss Size: - Virtual size: 31KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 112B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 134KB - Virtual size: 134KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 13KB - Virtual size: 12KB

.rdata
Size: 109KB - Virtual size: 108KB

.pdata
Size: 62KB - Virtual size: 62KB

.xdata
Size: 96KB - Virtual size: 95KB

.bss
Size: - Virtual size: 31KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 134KB - Virtual size: 134KB