Static task
static1
Behavioral task
behavioral1
Sample
WinBin2Iso.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WinBin2Iso.exe
Resource
win10v2004-20220812-en
General
-
Target
WinBin2Iso.exe
-
Size
200KB
-
MD5
086f5ed6f7153fb2b2a11832f3f3d894
-
SHA1
a92bcdf7dd3eb37116de0e6d7b514ab8eb4c4494
-
SHA256
225d622da413e5e17514bc50e9cf9980b49c76fcf4dbf2b9892edace05d0965c
-
SHA512
0935c3a4b9d077caab0be7777886160ecdd50a4f868be2865247fdfd264940476cb049636c55d12d404b6e11432190cde7806bb38003c4d825c92681dc550a8f
-
SSDEEP
3072:/B5t95o9N8euzzRZfWcGjo4UM2FEcTlszOF7pmfEpc8uwmQ8uwmb:p5pof8e+Xgk3MyT+C7+nw5w
Malware Config
Signatures
Files
-
WinBin2Iso.exe.exe windows x86
ff5e9dec21c78feb02dc8b49c79f1eec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SizeofResource
LockResource
LoadResource
FindResourceA
GetTimeZoneInformation
Sleep
GetModuleHandleW
GetCurrentThreadId
GetLocalTime
GlobalUnlock
GlobalLock
GlobalSize
lstrcmpA
TerminateThread
lstrcpynA
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
GetUserDefaultLangID
SetFileAttributesA
lstrlenW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
RaiseException
CreateThread
VirtualAlloc
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetLastError
TlsGetValue
TlsAlloc
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
GetSystemTime
TerminateProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
CreateFileA
ReadFile
GetFileSize
SetFilePointer
WriteFile
CloseHandle
DeleteFileA
GetFileAttributesA
GetModuleFileNameA
GetVersionExA
GetTempPathA
LoadLibraryA
GetProcAddress
SetLastError
lstrcatA
lstrcpyA
MultiByteToWideChar
GetModuleHandleA
InterlockedDecrement
OutputDebugStringA
DebugBreak
lstrlenA
WideCharToMultiByte
InterlockedIncrement
HeapSize
user32
FindWindowExA
DestroyIcon
LoadCursorA
LoadIconA
RegisterClassA
BeginPaint
SystemParametersInfoA
SetTimer
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
CreateWindowExA
SetWindowsHookExA
GetWindowLongA
DrawAnimatedRects
RegisterWindowMessageA
SendMessageTimeoutA
EnumWindows
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
LoadAcceleratorsA
RegisterClassExA
UpdateWindow
KillTimer
CharLowerA
CharNextA
SetWindowLongA
CallNextHookEx
DrawTextA
CallWindowProcA
GetClassNameA
DefWindowProcA
SetPropW
SystemParametersInfoW
GetClientRect
ScreenToClient
LoadBitmapA
GetActiveWindow
IsWindow
IsWindowVisible
SetForegroundWindow
InsertMenuA
ClientToScreen
MapWindowPoints
SetWindowPos
CreatePopupMenu
AppendMenuA
SetMenuItemBitmaps
GetWindowRect
TrackPopupMenu
GetDC
GetSysColor
DrawIconEx
ReleaseDC
CopyImage
EnableWindow
GetWindowTextA
SetWindowTextA
CreateDialogParamA
ShowWindow
MessageBoxA
EndDialog
PostQuitMessage
GetSystemMetrics
LoadImageA
PostMessageA
SendMessageA
GetDlgItem
LoadStringA
wvsprintfA
wsprintfA
EndPaint
gdi32
CreateFontIndirectA
GetStockObject
GetClipBox
ExtTextOutA
SetBkColor
SetTextColor
SetBkMode
CreateSolidBrush
GetObjectA
GetDIBits
DeleteObject
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
CryptDestroyHash
CryptReleaseContext
CryptCreateHash
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
CryptGetHashParam
CryptAcquireContextA
CryptHashData
shell32
Shell_NotifyIconA
DragQueryFileA
DragFinish
ord18
ord17
ord16
ord155
SHGetDesktopFolder
ord189
ShellExecuteExA
ShellExecuteA
SHAppBarMessage
ole32
OleInitialize
CoCreateInstance
CoInitialize
comctl32
InitCommonControlsEx
ord17
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ