Static task
static1
Behavioral task
behavioral1
Sample
bdbe7b457c78279057bf765b74f952c0164fe3fb97d7494e982a9331181bea8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdbe7b457c78279057bf765b74f952c0164fe3fb97d7494e982a9331181bea8c.exe
Resource
win10v2004-20220812-en
General
-
Target
bdbe7b457c78279057bf765b74f952c0164fe3fb97d7494e982a9331181bea8c
-
Size
102KB
-
MD5
db630b46acbe8a2573563e6d95918fe3
-
SHA1
dabcb85544034bef231de28a6815d76539c7f533
-
SHA256
bdbe7b457c78279057bf765b74f952c0164fe3fb97d7494e982a9331181bea8c
-
SHA512
18190af8009289b9b08e3662627e731bafff38ff48c2f4c9dc21efc73d91080371e377ef648dd8ec726b74d3a604f9b549a91982db6cfb0e7eda8830d967017b
-
SSDEEP
1536:p/n+m3LbTcvw/bPews/JXRyYfED+SglWDJHaz:p/n+m3Tcy7WVj8D0ADV
Malware Config
Signatures
Files
-
bdbe7b457c78279057bf765b74f952c0164fe3fb97d7494e982a9331181bea8c.exe windows x86
3ee18340605b387036dea74ad6c727d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
LocalAlloc
CreateFileW
LoadLibraryW
WriteFile
GetCurrentProcess
WaitForSingleObject
GetSystemTimeAsFileTime
GetProcAddress
LocalFree
GetCurrentProcess
WriteFile
FreeLibrary
VirtualAlloc
SetLastError
GetProcAddress
GetTickCount
GetTickCount
ExitProcess
WideCharToMultiByte
HeapFree
QueryPerformanceCounter
CreateThread
CloseHandle
GetCommandLineW
ReadFile
SetUnhandledExceptionFilter
lstrlenW
VirtualFree
CreateFileW
LocalFree
FreeLibrary
MultiByteToWideChar
QueryPerformanceCounter
WideCharToMultiByte
FormatMessageW
VirtualFree
CloseHandle
lstrcmpiW
WideCharToMultiByte
GetCurrentThreadId
CloseHandle
GetTickCount
InterlockedIncrement
GetStartupInfoA
Sections
.lxyt Size: 91KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vxvi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txtp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mnef Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wkmk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.joar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ryss Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.uhol Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qqsr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fjbo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE