Static task
static1
Behavioral task
behavioral1
Sample
bc408ca5f8a4816ec183913e10f994068cbdcfcfa842afabca005e3863749cc5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc408ca5f8a4816ec183913e10f994068cbdcfcfa842afabca005e3863749cc5.exe
Resource
win10v2004-20220901-en
General
-
Target
bc408ca5f8a4816ec183913e10f994068cbdcfcfa842afabca005e3863749cc5
-
Size
130KB
-
MD5
66d080bd51332d55c68f527947a36000
-
SHA1
b2eaf10e8a109a323a5dba28948812c90f658605
-
SHA256
bc408ca5f8a4816ec183913e10f994068cbdcfcfa842afabca005e3863749cc5
-
SHA512
d340b21d5631553efe220ccb8e2214cce281b0d948758b11e1b3593426cfbab2ea3f7c1ce97002d8ec2dcc5e5dffe5295264e28253b0835cd31cd861c5510a0a
-
SSDEEP
1536:bG3tGuRDxib6GqkSZZZ3bdvq3hSMTQXxJyFwC+XzQzeXg+AOmD7XtN:b0RDEbFUdq3kMsXxJ4+XzQzeX7AD9N
Malware Config
Signatures
Files
-
bc408ca5f8a4816ec183913e10f994068cbdcfcfa842afabca005e3863749cc5.exe windows x86
41fd7fe98d75104cec7b37b58efb724b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
PostQuitMessage
TranslateMessage
RegisterClassExW
LoadIconW
ShowWindow
CreateWindowExW
DefWindowProcW
DispatchMessageW
msvcr90
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
_encode_pointer
__set_app_type
memset
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_exit
_cexit
__wgetmainargs
_amsg_exit
_adjust_fdiv
_crt_debugger_hook
kernel32
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ