Static task
static1
Behavioral task
behavioral1
Sample
00b9b126a3ed8609f9c41971155307be.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
00b9b126a3ed8609f9c41971155307be.exe
Resource
win10v2004-20230220-en
General
-
Target
00b9b126a3ed8609f9c41971155307be.bin
-
Size
990KB
-
MD5
00b9b126a3ed8609f9c41971155307be
-
SHA1
6f4fa4ea831b14fcdfe68c30f02d4281630fe0e0
-
SHA256
bab2776edef029cf4632663c59297bb25eced4f7dece18cfa45e88ce2ece42a0
-
SHA512
4e2353194faf02b7a40e11a6cc076b4fdf701cc9209c2ac59efde845d18609d0f35f9e774a936e33e53f9fb7e1e2c4627a4cb36cb22192ed087ca481c322aee9
-
SSDEEP
24576:bwW2XiDCwF4bkb31HVob+xM+DC+Z+4voO4:pDCwF4YVE+xEHO4
Malware Config
Signatures
Files
-
00b9b126a3ed8609f9c41971155307be.bin.exe windows x86
530f5b19d02e648104da6b1a84a86fc6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetSystemTime
SetEvent
VirtualProtect
VirtualAlloc
Sleep
FreeConsole
WriteConsoleW
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindResourceExW
OutputDebugStringW
GetTimeZoneInformation
HeapReAlloc
QueryPerformanceCounter
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
GetCurrentThread
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetCurrentThreadId
FindClose
GetTickCount
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
HeapAlloc
GetCommandLineW
GetModuleHandleA
SetUnhandledExceptionFilter
OutputDebugStringA
GetStartupInfoA
WideCharToMultiByte
SetConsoleCtrlHandler
lstrlenA
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
FormatMessageA
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LocalFree
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
SetEndOfFile
user32
SetForegroundWindow
DrawTextW
ReleaseDC
SetWindowPlacement
GetMessageW
TranslateAcceleratorW
GetMessageExtraInfo
RegisterClassExW
GetDC
MessageBoxA
GetClassWord
MonitorFromRect
EqualRect
EnumDisplayMonitors
IntersectRect
CopyRect
MonitorFromWindow
GetMonitorInfoW
OffsetRect
GetNextDlgTabItem
CheckMenuItem
SetDlgItemInt
GetDlgItemInt
MoveWindow
IsDlgButtonChecked
SendDlgItemMessageW
UpdateWindow
CheckRadioButton
GetMenu
SetPropW
EnumChildWindows
GetSystemMetrics
gdi32
SetBkColor
GetStockObject
SetBkMode
SetTextColor
CreatePatternBrush
SelectObject
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreateCompatibleBitmap
ExtCreatePen
shell32
SHGetFolderPathW
ShellAboutW
ShellExecuteExW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoInitialize
CoCreateInstance
comctl32
PropertySheetW
CreatePropertySheetPageW
ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_SetBkColor
gdiplus
GdipDrawLineI
GdipFillRectangleI
GdipDrawArcI
uxtheme
IsThemeActive
Sections
.text Size: 525KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 357KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ