bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0.zip
- SHA256 4e559c0d675abe7fa177e3aaa267e83f52675fdf9599112926c2a57d46e05202
Password
threatbook
Static task
static1
Behavioral task
behavioral1
Sample
bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0.exe
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
General
- Target bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0.zip
- Size 205KB
- Sample220919-lckdtaechm
- SHA256 4e559c0d675abe7fa177e3aaa267e83f52675fdf9599112926c2a57d46e05202
- MD5 617485a3774e52df5d87710c37632d06
- SHA1 8951d1178798e85bc23e38a56675c45a7c2202d5
- SHA512 5dc498aa1d493f44492c5cb1d2351514a5f0af0460a70c7609bc74e281d9750abce9671a13d5f1b901d237b89502849b6a8bd4e591253a1079d42cf01fcd6984
- SSDEEP 6144:jhBQo3ctY+1Mcg9PMFl41/f5/2AQb6eDAv6dfLxvhn:jvQcKYggpMFl41/fYz3ddDpV
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0.zip.zip 205KB
-
bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0.exe 346KB
bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0
- IMPHASH 15145246279dbac9c0f3d99a59f6d9e1
- SHA256 bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0
- MD5 9a68727c95ec5b26defb2543b5cbc295
- SHA1 53c6c85ed3c186461aab0c934c04942a061506f4
- SHA512 37cba52bcd12202f6d9d1e00c30c3fa10baf1fa7fb3a6ac507d7c6ed08ba157ff737be9fe4bdb0e2e04af0b2ebb6a46492a1cc09e071552b5f19d2562d34589f
- SSDEEP 6144:lL+7taB7I3nfSC5jTS10Xc8Mv1m6HPkWa4Pn0LiFTuQZ4Oy9YqTBe6jR1:I7mI3nfSCRu10Xc8Mv1JJaGn0L8T01TD
- MD5 SHA1 SHA512 SSDEEP
Password
threatbook
Minor OS version
Major OS version
Entry point
44672
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
QueryDosDeviceA
LocalFree
SetProcessPriorityBoost
VirtualQuery
GlobalGetAtomNameW
FindResourceA
GetComputerNameExW
GetModuleHandleA
GetTempPathA
BuildCommDCBAndTimeoutsW
GetProcAddress
VirtualProtect
OpenJobObjectW
_lwrite
UnlockFile
GetPrivateProfileStructA
GetDiskFreeSpaceExW
DefineDosDeviceA
SetVolumeMountPointW
GetAtomNameA
FlushConsoleInputBuffer
EnumResourceLanguagesA
GetCPInfoExW
GetThreadContext
lstrlenW
GetProcessAffinityMask
SetConsoleWindowInfo
CreateJobSet
CopyFileW
lstrcpynA
WriteConsoleA
GetCommandLineA
GetLastError
GetCommandLineW
InterlockedIncrement
FormatMessageW
CreateJobObjectW
InitializeCriticalSection
FindNextVolumeA
SetConsoleCursorInfo
LoadLibraryW
VerifyVersionInfoA
AddAtomW
InterlockedDecrement
LoadLibraryA
FoldStringA
GetDefaultCommConfigW
GetConsoleAliasesLengthW
lstrcpyA
TerminateThread
HeapFree
SetCriticalSectionSpinCount
GetComputerNameA
EnumSystemLocalesW
DisableThreadLibraryCalls
OpenMutexA
LocalFileTimeToFileTime
SearchPathA
SetProcessShutdownParameters
CreateMutexA
FormatMessageA
InterlockedCompareExchange
EnumDateFormatsW
GetConsoleScreenBufferInfo
LocalAlloc
SetFileShortNameA
EnumCalendarInfoExW
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameW
ReadConsoleInputA
EnumDateFormatsA
_hwrite
GetConsoleAliasA
GetQueuedCompletionStatus
lstrcatW
GetDefaultCommConfigA
GetFullPathNameW
DebugBreakProcess
AddAtomA
SetCurrentDirectoryW
SetCalendarInfoW
GetProfileSectionW
FindNextFileA
SetHandleCount
MoveFileWithProgressW
ReadConsoleOutputCharacterW
CopyFileExW
WriteProfileSectionW
GetModuleHandleW
Sleep
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MoveFileA
DeleteFileA
RaiseException
GetStartupInfoA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetModuleFileNameA
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
CloseHandle
SetStdHandle
GetConsoleOutputCP
CreateFileA
gdi32
GetCharWidth32A
GetBoundsRect
GetCharWidthW
SelectObject
advapi32
RevertToSelf
Name
.text
Size
196KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
128KB
Virtual Size
4.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ