Static task
static1
Behavioral task
behavioral1
Sample
bcf9ee8fc7d57483d40c4d61a0b3d9379afb43a71a51d1f5032d5e2859b01d43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcf9ee8fc7d57483d40c4d61a0b3d9379afb43a71a51d1f5032d5e2859b01d43.exe
Resource
win10v2004-20220812-en
General
-
Target
bcf9ee8fc7d57483d40c4d61a0b3d9379afb43a71a51d1f5032d5e2859b01d43
-
Size
93KB
-
MD5
167dfd151823f400c1b2f7758e2c806b
-
SHA1
1a80f630b52d65028ad5559f61f13cb3fa3378aa
-
SHA256
bcf9ee8fc7d57483d40c4d61a0b3d9379afb43a71a51d1f5032d5e2859b01d43
-
SHA512
d84b8b64f810bb1e3ebc46f091724426974e2dd13298695f7c01908aee8830a6f3fe70ca79fd53aca2002d4c336f318dcb13249947764873d5437f1afd5b74fd
-
SSDEEP
1536:fW52jejsV8ebbsFMaumGg5cyUnpAC82NVueEM5crVO6TjP/fIg:e5YemHYJuLRnpACh35QVOUr
Malware Config
Signatures
Files
-
bcf9ee8fc7d57483d40c4d61a0b3d9379afb43a71a51d1f5032d5e2859b01d43.exe windows x86
1ab9f5c9a2ce07ca5abe90b586cb2214
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
GetLocalTime
GetStdHandle
GetCPInfo
FatalExit
FindAtomA
FlushFileBuffers
GetCommandLineA
GlobalFree
GetPriorityClass
FreeResource
ExitThread
ReadFile
CopyFileExW
GlobalFree
FindClose
AddAtomA
WriteFile
CopyFileExW
AddAtomW
GetPriorityClass
DeleteAtom
FlushFileBuffers
GetFileType
DeleteFileW
OpenFile
ReadFile
DeleteFileA
GetLastError
OpenFileMappingA
GetFileTime
GetCPInfo
ExitProcess
GetCPInfo
AddAtomW
ExitThread
FindAtomA
CreateDirectoryA
GetStdHandle
GetFileType
CopyFileExW
CopyFileExA
DeleteFileA
GetLocalTime
GlobalFree
advapi32
RegCreateKeyA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyW
RegQueryValueExW
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyA
RegEnumValueA
RegDeleteKeyW
RegLoadKeyA
RegEnumValueW
RegReplaceKeyA
Sections
.9a227 Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.acdd Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1efd Size: 46KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cd9h5 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ