Static task
static1
Behavioral task
behavioral1
Sample
bda5116a7d8ccf75e1402003fecd61a20be97a5c0a7a33841b2f8e17d27fdc20.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bda5116a7d8ccf75e1402003fecd61a20be97a5c0a7a33841b2f8e17d27fdc20.exe
Resource
win10v2004-20220812-en
General
-
Target
bda5116a7d8ccf75e1402003fecd61a20be97a5c0a7a33841b2f8e17d27fdc20
-
Size
185KB
-
MD5
f598a81bf52d9a747130dea5854b3baf
-
SHA1
cde3c8017398f68f9a42462194fbeff6842b6a81
-
SHA256
bda5116a7d8ccf75e1402003fecd61a20be97a5c0a7a33841b2f8e17d27fdc20
-
SHA512
243811ba7f028cd7eda324c59093fe09b6c22396bef897a49d6959b9ab29038861de4bdbc7853d98fa38b1ebd11ea64b6a3bbbe70633429c66edbe37adbbd3ad
-
SSDEEP
3072:pN3LLxTH8qGxwV+kROHrK5dU7SGDu3HNdztzUitUX1t0GUIRgawkc:z3LF8sQO5d4SGDap5OX1t0eRi
Malware Config
Signatures
Files
-
bda5116a7d8ccf75e1402003fecd61a20be97a5c0a7a33841b2f8e17d27fdc20.exe windows x86
cca02b7d1d2331419f53a7bcdaae78d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetACP
LCMapStringA
lstrlenA
SetStdHandle
TerminateProcess
ResumeThread
GetStartupInfoA
ExitProcess
GlobalDeleteAtom
SetFilePointer
SetUnhandledExceptionFilter
GetOEMCP
WriteConsoleW
DeviceIoControl
SetConsoleCP
GetStringTypeA
VirtualProtect
GetLastError
HeapAlloc
GetModuleFileNameA
GetModuleHandleA
SetCurrentDirectoryA
user32
SetFocus
GetClientRect
FindWindowA
msvcrt
_amsg_exit
??2@YAPAXI@Z
advapi32
RegCloseKey
gdi32
LPtoDP
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ