Static task
static1
Behavioral task
behavioral1
Sample
bdf7966cca9041f43b12a20fe75665f1cd612b519a0740be5a36ea9fe0ca9717.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdf7966cca9041f43b12a20fe75665f1cd612b519a0740be5a36ea9fe0ca9717.exe
Resource
win10v2004-20220812-en
General
-
Target
bdf7966cca9041f43b12a20fe75665f1cd612b519a0740be5a36ea9fe0ca9717
-
Size
210KB
-
MD5
4d41dde8c2b2d360e8006a507f675110
-
SHA1
1f993bcaff3624cac7dba3d997710de6a9e81c1c
-
SHA256
bdf7966cca9041f43b12a20fe75665f1cd612b519a0740be5a36ea9fe0ca9717
-
SHA512
fe455c153dbadd19c5f232b2aa71a137aabb4d2ed9c0d9c83143319dd88a28f0f05b84349935da729abba15b697417cd7832852f488db56cdca34a0457cb9d82
-
SSDEEP
6144:NRW8Amz6FYA03vpyf7DgRUndQa/N1rLjV1jb1LIU:H/O6AChw4RUnd51rLJ13v
Malware Config
Signatures
Files
-
bdf7966cca9041f43b12a20fe75665f1cd612b519a0740be5a36ea9fe0ca9717.exe windows x86
63dd7cf4b90da123cc9ad620296aacad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
HeapAlloc
SetUnhandledExceptionFilter
GetVolumeInformationA
CreateFileA
WideCharToMultiByte
GetProcessHeap
IsValidLocale
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapFree
GetLocalTime
FindResourceA
lstrcmpA
QueryPerformanceCounter
SystemTimeToFileTime
GetCurrentProcessId
GetTickCount
LoadLibraryW
lstrcpyA
SetLastError
GetOEMCP
MultiByteToWideChar
lstrlenA
CloseHandle
schannel
QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesA
QuerySecurityPackageInfoW
scecli
SceAddToObjectList
SceAnalyzeSystem
SceAddToNameStatusList
SceCloseProfile
SceBrowseDatabaseTable
SceAppendSecurityProfileInfo
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 7KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ