Static task
static1
Behavioral task
behavioral1
Sample
infected.exe
Resource
win7-20230220-en
General
-
Target
infected.bin
-
Size
684KB
-
MD5
7fb83e646cbabc50bec4b33c8130b5ae
-
SHA1
18e498d3432ab9c56e6a9ad8f68c3c500750a20b
-
SHA256
d34545c4f89d3cfc70e755f31c883715eec25d0e692e40810aab9682c5830c0c
-
SHA512
2bdf1a8c13fe49db50649778f49105b8880bbf91e7a6c506ca46a903d0554ec908569d9e6684d0bd6e88931c9f530e1e206e762b867bbe17818826ec787060fc
-
SSDEEP
12288:tNB4oCIUs0QcBWSohFFmKeTdMKjnwrUI4j1dv8YHdKDZyjRFBTD25BEb5r4u73fO:tNB4BxsJcBghF8KeTdBjnw4/j1dvh9Bv
Malware Config
Signatures
Files
-
infected.bin.exe windows x86
1fb22fdd2e3d52ede09eb0fb5533be2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
GlobalSize
GlobalAlloc
WaitForSingleObject
InterlockedExchange
GetModuleHandleW
LocalFree
SetFilePointer
SetEvent
GetModuleFileNameW
GetStartupInfoW
user32
AdjustWindowRectEx
LoadStringW
ReleaseCapture
UnregisterClassA
GetKeyState
GetCursorPos
DrawFocusRect
DestroyMenu
CheckMenuItem
DestroyIcon
LoadIconA
GetMenuStringW
RegisterClassW
GetActiveWindow
SetTimer
SetWindowLongW
MessageBeep
SetWindowPos
GetMenuItemCount
ShowWindowAsync
DefWindowProcW
SetCapture
GetMenu
GetClientRect
PostMessageW
SetMenuItemInfoA
CreateWindowExA
MoveWindow
PtInRect
SetWindowTextW
InflateRect
ClientToScreen
ReleaseDC
DestroyWindow
GetSubMenu
OffsetRect
SendMessageW
SetActiveWindow
TrackPopupMenu
CreateWindowExW
ole32
CoCreateGuid
CoTaskMemFree
CoUninitialize
OleRun
StringFromCLSID
CLSIDFromProgID
OleInitialize
CoInitialize
msvcrt
__setusermatherr
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_initterm
Sections
.text Size: 400KB - Virtual size: 397KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ