Static task
static1
Behavioral task
behavioral1
Sample
bd4295c21ba587364396c3e2cf5bb8d08f169c737c560b0acd75760f3179a8b0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bd4295c21ba587364396c3e2cf5bb8d08f169c737c560b0acd75760f3179a8b0.exe
Resource
win10v2004-20220901-en
General
-
Target
bd4295c21ba587364396c3e2cf5bb8d08f169c737c560b0acd75760f3179a8b0
-
Size
301KB
-
MD5
6916e3903f7773eed6bed1bf734bd530
-
SHA1
a1704d2e54fac1a97c6be583adebf0e5885f5fee
-
SHA256
bd4295c21ba587364396c3e2cf5bb8d08f169c737c560b0acd75760f3179a8b0
-
SHA512
87a5a948b0ce1878a7f2fe4ef500aa86c5069b7ddaf9ff20cf11317d63598b8ddd1597c5a44141ac32cdde8d3edd483a29dc8e00ff4e9ce127bbfe1557bf2851
-
SSDEEP
3072:6Da4rjfWniWLhLHKpFYbVLJ06FmVLyoZpCNLnLp3NxGs5hu58cnaye7HYHD2u+6+:MhWnRY21R8VeypOB3X174j2BmoZY90
Malware Config
Signatures
Files
-
bd4295c21ba587364396c3e2cf5bb8d08f169c737c560b0acd75760f3179a8b0.exe windows x86
7ae0ee1cae2f16fdc56c07a11348b0ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryW
TlsGetValue
CreateDirectoryW
GetTickCount
SetLastError
GetFileAttributesA
GetCurrentProcess
HeapSize
GetDriveTypeW
FindClose
GetModuleHandleA
IsValidCodePage
VirtualProtect
FindResourceA
MapViewOfFile
GetFileAttributesA
GetExitCodeThread
GetStringTypeA
GetLocaleInfoA
IsBadWritePtr
LocalLock
user32
SetCursor
GetWindowTextW
IsDialogMessageA
PostMessageW
DispatchMessageA
SetFocus
LoadImageW
IsWindow
GetWindowLongW
LoadCursorA
PeekMessageW
wsprintfW
GetCapture
msaatext
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE