Static task
static1
Behavioral task
behavioral1
Sample
bd661f221369b8b23a756131b348ecf903ec1b5e16c3bdd78b2f95c0e8be5153.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bd661f221369b8b23a756131b348ecf903ec1b5e16c3bdd78b2f95c0e8be5153.exe
Resource
win10v2004-20220812-en
General
-
Target
bd661f221369b8b23a756131b348ecf903ec1b5e16c3bdd78b2f95c0e8be5153
-
Size
214KB
-
MD5
918ae613f9eb3e16e5eb0b132c4355c0
-
SHA1
acc938b9921e985f3667948752622d12d5010512
-
SHA256
bd661f221369b8b23a756131b348ecf903ec1b5e16c3bdd78b2f95c0e8be5153
-
SHA512
45351a6bb566662723c5b867abebd27b1ff15ec5a65ba0443ba729929b75e05f946ae560e1178638d9c71811cd4f15dc29c75118bf49b287432d7a1023d047fc
-
SSDEEP
3072:JcMFD4c9t444J5DCCcbMLfD/eGF3UvgBPD3dK8lQicYWefTmochwCl3OzaW0SdGQ:LD4mj4JFJcbseGdUvUs8lY7Ozau3
Malware Config
Signatures
Files
-
bd661f221369b8b23a756131b348ecf903ec1b5e16c3bdd78b2f95c0e8be5153.exe windows x86
a7134995c80266ddb0e4b994a24279e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
schannel
QuerySecurityPackageInfoW
QueryContextAttributesW
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoA
MakeSignature
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
kernel32
GetCurrentProcess
LockResource
QueryPerformanceCounter
HeapAlloc
SetLastError
FindResourceA
GetTickCount
SetUnhandledExceptionFilter
CreateFileA
MultiByteToWideChar
HeapFree
GetProcessHeap
lstrcmpA
GetCurrentProcessId
QueryDosDeviceA
GetOEMCP
CloseHandle
GetSystemTimeAsFileTime
LoadLibraryW
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
GetLocalTime
lstrlenA
GetLocaleInfoW
WideCharToMultiByte
secur32
FreeCredentialsHandle
FreeContextBuffer
ExportSecurityContext
EnumerateSecurityPackagesW
GetComputerObjectNameA
scecli
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceAnalyzeSystem
SceCloseProfile
SceBrowseDatabaseTable
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ