Static task
static1
Behavioral task
behavioral1
Sample
bdb87e7c263d73b116cde7d664e73b4fdadc1b6406d38412a450c8b661d3e842.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdb87e7c263d73b116cde7d664e73b4fdadc1b6406d38412a450c8b661d3e842.exe
Resource
win10v2004-20220812-en
General
-
Target
bdb87e7c263d73b116cde7d664e73b4fdadc1b6406d38412a450c8b661d3e842
-
Size
172KB
-
MD5
7949dc32ffd726384882dd81878b7918
-
SHA1
fa98cc79162c9517e1b862c915c4fd514077589e
-
SHA256
bdb87e7c263d73b116cde7d664e73b4fdadc1b6406d38412a450c8b661d3e842
-
SHA512
befdb419b948eeab5707a544983b2a7c39cadb3d5b3577dcc616b8b9fb4fbe73de2f22757c65f3d7709ae045ca25b89fa6dca1b7be4047ff208eaebe3ebc6ae2
-
SSDEEP
3072:U3K40kaRHNJp+Ls54gGUFvbGgPW6ZdWPHFO5XB/POz:HkCd+g54g/M6rWPHFO5Xgz
Malware Config
Signatures
Files
-
bdb87e7c263d73b116cde7d664e73b4fdadc1b6406d38412a450c8b661d3e842.exe windows x86
2aa28f917895817f3ed706ec940ea0b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateMutexA
GetConsoleMode
DeleteFileW
CopyFileA
FindResourceA
FindResourceW
CloseHandle
GetCPInfo
AddAtomA
FindNextFileA
CreateDirectoryA
FindNextFileA
GetFileSize
GlobalFree
DeleteFileA
GetFileTime
ReadConsoleW
FindResourceW
CopyFileExW
GetFileSize
CreateMutexW
CloseHandle
CreateFileA
DeleteFileA
CreateDirectoryA
CopyFileW
ExitProcess
FindNextVolumeA
GetStdHandle
CreateMutexW
ReadFile
GetStdHandle
FindResourceA
WriteFile
WriteFile
WriteFile
CreateDirectoryA
DeleteFileW
ReadConsoleW
FindResourceW
CopyFileW
GetConsoleMode
ReadConsoleW
Sleep
GetComputerNameA
ReadFile
DeleteFileW
CreateMutexA
FindFirstFileA
GetComputerNameA
CopyFileW
CreateFileA
FindNextFileA
GetFileTime
DeleteFileA
CreateDirectoryA
GetFileSize
ExitProcess
WriteFile
CloseHandle
GetCPInfo
AddAtomA
ExitProcess
CopyFileExW
CreateMutexA
GetConsoleMode
OpenFileMappingA
CloseHandle
GetComputerNameA
CreateFileA
OpenFileMappingA
CreateMutexW
DeleteFileW
CreateMutexA
GetFileTime
GetCPInfo
CopyFileW
FindFirstFileA
ExitProcess
GlobalFree
CreateFileA
AddAtomA
GetFileSize
GetStdHandle
FindResourceA
FindNextVolumeA
GetFileSize
CloseHandle
ReadConsoleW
Sleep
CopyFileExW
GetConsoleMode
CopyFileExW
AddAtomA
CreateDirectoryA
CopyFileW
FindNextVolumeA
CopyFileA
OpenFileMappingA
DeleteFileA
FindNextFileA
ReadFile
FindResourceA
ExitProcess
ReadConsoleW
ReadFile
FindNextVolumeA
GetComputerNameA
ReadConsoleW
FindResourceW
GlobalFree
GetFileTime
CloseHandle
OpenFileMappingA
ReadConsoleW
GetConsoleMode
GetFileSize
CopyFileW
FindNextVolumeA
CreateMutexA
DeleteFileW
FindResourceW
ExitProcess
GetStdHandle
CopyFileExW
CreateDirectoryA
DeleteFileA
FindNextFileA
DeleteFileA
FindNextFileA
OpenFileMappingA
CopyFileW
WriteFile
CopyFileExW
ReadFile
CreateFileA
DeleteFileW
Sleep
CopyFileA
FindFirstFileA
GlobalFree
CreateMutexA
Sections
DATA Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ