Static task
static1
Behavioral task
behavioral1
Sample
bd866615042a3fc07ebaf16e702e3c1ec639fb6c7e6abc4fb408134241c75c1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd866615042a3fc07ebaf16e702e3c1ec639fb6c7e6abc4fb408134241c75c1d.exe
Resource
win10v2004-20220901-en
General
-
Target
bd866615042a3fc07ebaf16e702e3c1ec639fb6c7e6abc4fb408134241c75c1d
-
Size
299KB
-
MD5
919379dd997795a288e74fd6cca9b640
-
SHA1
9ad054c511fd022f80fcd89b20b03035b4090b33
-
SHA256
bd866615042a3fc07ebaf16e702e3c1ec639fb6c7e6abc4fb408134241c75c1d
-
SHA512
e2dd89dcf799ee563380b34082e3b0b00cb64b5646954c446be97068fca8b330d53f501c6630d601f81e75ecd6a9783b597b6f8f4628b3d29c6b1be8bf421b6b
-
SSDEEP
6144:chnWnvmVOHjOOBmfn6V7R/YmlX4i0wqLeOx8PwwOCaig/:OWvmVmOkmPc7R/Y8oi01RGYwIi
Malware Config
Signatures
Files
-
bd866615042a3fc07ebaf16e702e3c1ec639fb6c7e6abc4fb408134241c75c1d.exe windows x86
a17eef83c47fe91f0b78a146830c3494
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
HeapSize
ResetEvent
GetFileAttributesA
CreateDirectoryA
FindResourceA
CreateMailslotW
GetDriveTypeW
GetModuleHandleA
GetTickCount
IsValidCodePage
SetLastError
VirtualProtect
MapViewOfFile
IsBadWritePtr
GetFileAttributesA
GetLocaleInfoA
GetExitCodeThread
FindClose
RemoveDirectoryA
GetProcessHeap
user32
GetWindowTextW
SetCursor
GetWindowLongW
DispatchMessageA
PeekMessageA
IsWindow
SetFocus
IsDialogMessageA
GetCapture
PostMessageW
wsprintfA
LoadImageW
LoadCursorA
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE