Static task
static1
Behavioral task
behavioral1
Sample
bdac36ce590f54cea9c25cce1203efc455ba718e10ef6cc1526f783b9aa87eee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdac36ce590f54cea9c25cce1203efc455ba718e10ef6cc1526f783b9aa87eee.exe
Resource
win10v2004-20220901-en
General
-
Target
bdac36ce590f54cea9c25cce1203efc455ba718e10ef6cc1526f783b9aa87eee
-
Size
151KB
-
MD5
4bf2896724a2dd6d1602414900925532
-
SHA1
4c2568cfd76a8bf141866f5d8e96f842bd0a8d61
-
SHA256
bdac36ce590f54cea9c25cce1203efc455ba718e10ef6cc1526f783b9aa87eee
-
SHA512
36ffb45fb068e511aa5257d38a99f60c1ed939082bd57e0f77fdd9821b5c2ff64d7dc9a5ed3277d42e4f5b88b38bb39417e7a3fb319c7841fb6a9fa012b1e3d7
-
SSDEEP
3072:apNJ8YmtJNV0rXFtgBlspkEKbZyaAYgEaMdkG:apHXm/0lkgEaM2G
Malware Config
Signatures
Files
-
bdac36ce590f54cea9c25cce1203efc455ba718e10ef6cc1526f783b9aa87eee.exe windows x86
51de101a115e9ec2216885a2dd828281
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueA
kernel32
ExitThread
GetCurrentThread
SetFilePointer
GetLastError
lstrlenA
LoadLibraryExA
SetLastError
lstrcpynA
LoadLibraryA
GetOEMCP
VirtualAllocEx
ExitProcess
GlobalAlloc
GetFullPathNameA
HeapDestroy
EnumCalendarInfoA
ole32
CreateOleAdviseHolder
OleRegGetUserType
CoGetObjectContext
version
VerQueryValueA
msvcrt
exit
malloc
atol
time
mbstowcs
memmove
clock
wcsncmp
sqrt
calloc
srand
tolower
Sections
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ