Static task
static1
Behavioral task
behavioral1
Sample
bc6c722eaa639859b898de9e2ed17832.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
bc6c722eaa639859b898de9e2ed17832.exe
Resource
win10v2004-en-20220113
General
-
Target
bc6c722eaa639859b898de9e2ed17832.exe
-
Size
265KB
-
MD5
bc6c722eaa639859b898de9e2ed17832
-
SHA1
bff54c4071ffecf0e822faea1712cdf7c3770dd8
-
SHA256
4aec64f64812b8ed41eebe2d561d166b6dc9c16f2a856f7d10408ec83f493c06
-
SHA512
14c01897d4d4e5bc447b149b57d246914017a2b13116de7dd97352fdd4d6609c3b0e5819cdf272fdf4893ea6353eb4a306761dd78739dd8c02e435c02207dc13
-
SSDEEP
6144:UN16onmBGawpu86pYM41UqoMmDZ06BL/kRg0L3fX:UjmBGLf6pYcqoMjML63/
Malware Config
Signatures
Files
-
bc6c722eaa639859b898de9e2ed17832.exe.exe windows x86
8c36d2c5b43a5a31e6eadec7848f46d6
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
TerminateProcess
ZombifyActCtx
GetConsoleAliasesLengthW
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
SetCommConfig
GetDriveTypeA
FreeEnvironmentStringsW
CreateTimerQueue
FindNextVolumeW
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
TlsGetValue
SetComputerNameExW
FindAtomW
BuildCommDCBAndTimeoutsW
LoadLibraryA
GlobalAlloc
InitializeCriticalSection
GetCommandLineA
InterlockedIncrement
GetCalendarInfoA
CopyFileA
OutputDebugStringA
GetSystemTimeAdjustment
GetPriorityClass
WritePrivateProfileStringA
ExitThread
GlobalUnfix
HeapCompact
GetStartupInfoW
CreatePipe
GetCPInfoExW
GetWindowsDirectoryW
GetSystemWow64DirectoryA
SetLastError
WriteProfileSectionW
GetCalendarInfoW
ResumeThread
SetConsoleCursorInfo
GetLastError
DebugActiveProcess
lstrcmpW
WriteFile
GetNumberOfConsoleInputEvents
GetSystemWindowsDirectoryW
CopyFileW
FindNextChangeNotification
CreateActCtxA
SetMailslotInfo
GetPrivateProfileIntA
_lread
OutputDebugStringW
InterlockedDecrement
DefineDosDeviceA
SetVolumeMountPointA
EndUpdateResourceW
WriteConsoleA
VirtualProtect
InterlockedPushEntrySList
DeleteCriticalSection
GetFileAttributesExW
FileTimeToSystemTime
GetVolumePathNameA
GetConsoleMode
HeapSetInformation
FindActCtxSectionStringA
WriteProcessMemory
MoveFileExA
GlobalCompact
UnregisterWait
DeleteAtom
FormatMessageA
FatalExit
TransmitCommChar
WaitNamedPipeW
FindResourceExA
EnumDateFormatsA
GetSystemTime
GetSystemInfo
EnumCalendarInfoExW
OpenSemaphoreA
GetProcAddress
GetPrivateProfileStructA
GetMailslotInfo
lstrcpyA
VerLanguageNameA
SetThreadExecutionState
SetSystemTime
GetFileInformationByHandle
GetConsoleCP
GetConsoleAliasA
SetConsoleScreenBufferSize
CreateMailslotA
EnumDateFormatsW
GetCommState
LockFile
_lopen
GetConsoleAliasExesLengthW
GetWriteWatch
CreateConsoleScreenBuffer
ClearCommBreak
ChangeTimerQueueTimer
GetOverlappedResult
WriteConsoleInputW
HeapSize
GetConsoleWindow
GetStringTypeA
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToOEM
OpenWaitableTimerW
GetProcessId
PeekNamedPipe
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
WriteProfileStringA
GlobalAddAtomA
WriteConsoleOutputCharacterW
TerminateJobObject
QueryDosDeviceW
VirtualAlloc
GetBinaryTypeW
InitAtomTable
LeaveCriticalSection
CreateFileA
MoveFileA
RaiseException
HeapValidate
IsBadReadPtr
EnterCriticalSection
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
DebugBreak
WriteConsoleW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
user32
OemToCharA
winhttp
WinHttpReadData
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rubutiz Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ