Static task
static1
Behavioral task
behavioral1
Sample
bc71b8e359d411c97e49ba90f4c7dc36c707602399b4d8b71ec6b769feb38fac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc71b8e359d411c97e49ba90f4c7dc36c707602399b4d8b71ec6b769feb38fac.exe
Resource
win10v2004-20220812-en
General
-
Target
bc71b8e359d411c97e49ba90f4c7dc36c707602399b4d8b71ec6b769feb38fac
-
Size
117KB
-
MD5
55dcfeaa4c1bb3930b00315192de1bd0
-
SHA1
1c034a24716d840463951f8ee15d0701bc42fea9
-
SHA256
bc71b8e359d411c97e49ba90f4c7dc36c707602399b4d8b71ec6b769feb38fac
-
SHA512
5c3259403e9a958f3246613f6308c8779703ebdd13231cee607c33f6c6f8834351e48e3794c8308a79154e62411d2de64496c5628d4ba1e37a3d1deb6159e299
-
SSDEEP
3072:qfb40t3x6vCgtf43B3FvJwfX/O+XYTsAM2SKbnxSu:tt04fm+esdUrz
Malware Config
Signatures
Files
-
bc71b8e359d411c97e49ba90f4c7dc36c707602399b4d8b71ec6b769feb38fac.exe windows x86
aff8394e9e9585e1986a5edb23ee66c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
IsBadStringPtrW
GetCurrentDirectoryW
ReadFile
lstrcatA
InitializeCriticalSection
CreateMutexA
HeapCreate
FormatMessageA
GetModuleHandleA
ReadConsoleA
ReadConsoleA
GetStartupInfoW
lstrcpyA
GetLastError
FindResourceA
IsValidLocale
ReadConsoleA
GetFileSize
GetFileTime
SetFileAttributesA
msi
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseAllHandles
user32
GetWindowLongW
PostMessageW
wsprintfW
LoadCursorW
GetWindowTextA
SetFocus
SetCursorPos
IsCharLowerA
IsWindow
DispatchMessageA
IsZoomed
IsDialogMessageA
PeekMessageW
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ