Static task
static1
Behavioral task
behavioral1
Sample
bdc84d475b2119a4f7d0ea9404211eb2c4dfc36fd913e2a743f1e7bd9ee76b29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdc84d475b2119a4f7d0ea9404211eb2c4dfc36fd913e2a743f1e7bd9ee76b29.exe
Resource
win10v2004-20220901-en
General
-
Target
bdc84d475b2119a4f7d0ea9404211eb2c4dfc36fd913e2a743f1e7bd9ee76b29
-
Size
1023KB
-
MD5
908fe4870f992753d70f46630184fdd4
-
SHA1
0caa3d12eb26d243922246daf3d22553252edbf1
-
SHA256
bdc84d475b2119a4f7d0ea9404211eb2c4dfc36fd913e2a743f1e7bd9ee76b29
-
SHA512
44c8b5fcd7e243c588e3b6dbb3c43f81c88b5b14c11ef854c9c818f6bbfae9baaae3d8777428fc97c3e3b518ddaf59b3a3c9b793d9ac36e37d18b63888b73cb2
-
SSDEEP
12288:8YwCR3WPiChEw3RD20V3Tib4hNE5vU0++ae/WLYu02rzfARavUkO8oeJ2sbs:qrL3RJVjCOUUc/v2HIuXs
Malware Config
Signatures
Files
-
bdc84d475b2119a4f7d0ea9404211eb2c4dfc36fd913e2a743f1e7bd9ee76b29.exe windows x86
a31b8193aff200927fedc310e3063d3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetCommandLineA
LocalFree
LocalAlloc
GetVersion
lstrlenA
CreateEventA
Sleep
lstrcpyA
gdi32
ExtTextOutA
GetTextColor
CreateCompatibleDC
GetPixel
SelectObject
GetDeviceCaps
PatBlt
SetROP2
CreateSolidBrush
GetObjectA
DeleteObject
GetStockObject
Sections
.text Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 989B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 507B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1017KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ