Static task
static1
Behavioral task
behavioral1
Sample
bdbe42e9a1b984565c2215dd73a965a208d1aea7aaf2e45c944f42b8e52ad5a3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdbe42e9a1b984565c2215dd73a965a208d1aea7aaf2e45c944f42b8e52ad5a3.exe
Resource
win10v2004-20220812-en
General
-
Target
bdbe42e9a1b984565c2215dd73a965a208d1aea7aaf2e45c944f42b8e52ad5a3
-
Size
176KB
-
MD5
bfe27ea52938325f29986d8932d6d4cb
-
SHA1
82295bac0405c60cd2619f4ee2be7f8718b15199
-
SHA256
bdbe42e9a1b984565c2215dd73a965a208d1aea7aaf2e45c944f42b8e52ad5a3
-
SHA512
5608ff12824aff7cd3ba83b314ae3957040ab98339ba523acaeb9946b164e23b1865cb1fa3670daae1e1c269a991d7791d65180afe8f0be73e1fc6eaf05e6dd5
-
SSDEEP
1536:gzdK5uYJ53gTuZ1I5sA089kJoFLNudDkbo:SdKgYJ5gTI1I5sDoZN2M
Malware Config
Signatures
Files
-
bdbe42e9a1b984565c2215dd73a965a208d1aea7aaf2e45c944f42b8e52ad5a3.exe windows x86
752af56fef17aab6767a96d9af658827
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
lstrcatA
GetWindowsDirectoryA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
CloseHandle
user32
wsprintfA
wininet
InternetCloseHandle
FtpGetFileA
InternetConnectA
InternetOpenA
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ