Static task
static1
Behavioral task
behavioral1
Sample
bec2972a0b1147791ad56977324f93fc9c2013822491343a502735a69daccd01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bec2972a0b1147791ad56977324f93fc9c2013822491343a502735a69daccd01.exe
Resource
win10v2004-20220812-en
General
-
Target
bec2972a0b1147791ad56977324f93fc9c2013822491343a502735a69daccd01
-
Size
128KB
-
MD5
5c4b78e9e8d3476c3452c4a496c925a0
-
SHA1
7a262b13f6bf3793d098c6f14bf608496e0d250d
-
SHA256
bec2972a0b1147791ad56977324f93fc9c2013822491343a502735a69daccd01
-
SHA512
db6686eabc2c95e42299a17a9b31bb4b7f21617b0827d6def4fb9bedb5f7c4fba3293972de630c8c825d224678fd9484075df3a149377de0861197066e6326b3
-
SSDEEP
1536:p/3hn3OcdfNg0Xu11hiJ6mbQzE8YOive:p/l3x5Ng0Xu118VQz5YOiG
Malware Config
Signatures
Files
-
bec2972a0b1147791ad56977324f93fc9c2013822491343a502735a69daccd01.exe windows x86
48d4b927d18c3d1439a3e4044dae0950
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
lstrcatA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
lstrcmpiA
DeleteFileA
TerminateProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetProcAddress
VirtualAlloc
LoadLibraryA
ReadFile
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetFilePointer
HeapCreate
GetACP
GetOEMCP
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetLastError
RtlUnwind
WriteFile
HeapFree
CloseHandle
oleaut32
SysFreeString
ole32
CoUninitialize
CoInitialize
CoCreateInstance
user32
EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA
comctl32
ord17
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didee Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ