Static task
static1
Behavioral task
behavioral1
Sample
bc2524534e24e9451deb13faac43897d86a3686275679a0d4e79d7e2565cc3eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc2524534e24e9451deb13faac43897d86a3686275679a0d4e79d7e2565cc3eb.exe
Resource
win10v2004-20220812-en
General
-
Target
bc2524534e24e9451deb13faac43897d86a3686275679a0d4e79d7e2565cc3eb
-
Size
300KB
-
MD5
6e94bf1ba4f34541eb120be4d076a470
-
SHA1
65f7b07aff6f39e28af10ec03b68f099930ed239
-
SHA256
bc2524534e24e9451deb13faac43897d86a3686275679a0d4e79d7e2565cc3eb
-
SHA512
914b8d4dc29040670d72dd253ec7efb8aae88f741f669181e0314d7bc2c61999c1521dea06b7b18e536c993f6560617eacff82cb78fe8ada141db5fdecc68262
-
SSDEEP
6144:OhWnkShGiayVO9wYK/QOdwVx5ONJXchiMQw5JbGU:OQzGiUwr/Q58M7bG
Malware Config
Signatures
Files
-
bc2524534e24e9451deb13faac43897d86a3686275679a0d4e79d7e2565cc3eb.exe windows x86
387a87a56712e3a5f9e131495c51fe16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
CancelIo
GetLocaleInfoA
VirtualProtect
IsBadWritePtr
GetModuleHandleA
FindClose
RemoveDirectoryA
CreateMailslotW
MapViewOfFile
SetLastError
HeapSize
GetDriveTypeW
ResetEvent
GetStdHandle
IsValidCodePage
CreateDirectoryA
GetExitCodeThread
GetFileAttributesA
GetCommandLineA
FindResourceA
user32
SetCursor
LoadImageW
GetWindowTextW
DestroyMenu
IsDialogMessageA
DispatchMessageA
PostMessageW
PeekMessageA
wsprintfA
LoadCursorA
GetCapture
GetWindowLongW
SetFocus
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE