Static task
static1
Behavioral task
behavioral1
Sample
bdacf5d324ac13bb1decbf52a750b67bc832cb59406a8c5660aa2c4316e38a93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdacf5d324ac13bb1decbf52a750b67bc832cb59406a8c5660aa2c4316e38a93.exe
Resource
win10v2004-20220812-en
General
-
Target
bdacf5d324ac13bb1decbf52a750b67bc832cb59406a8c5660aa2c4316e38a93
-
Size
222KB
-
MD5
2114db6ca536bba0f861c78d603fa397
-
SHA1
62daa8a12e3b57f2e167218a8bced86ade863d66
-
SHA256
bdacf5d324ac13bb1decbf52a750b67bc832cb59406a8c5660aa2c4316e38a93
-
SHA512
1ec3fd36fa7c1e7890d916ed75ba2fd525a0801258b62ccd57263ff9726ebebbba713e5686001b950a9bc80c5c623df0a63e0de6cb360081eed63b37e865de5b
-
SSDEEP
3072:wa1zTFXOhQjncpx+mzZTiU2giLRJu7ayhkZpoJEb3yS5V0CQIX5kJjNY9vXev3Ne:w2OhVFtTiUv3bqbCS5eRI6JpkvK3R1Q
Malware Config
Signatures
Files
-
bdacf5d324ac13bb1decbf52a750b67bc832cb59406a8c5660aa2c4316e38a93.exe windows x86
5bf20da3ec9e8ca78004d610a8c8e35d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetThreadContext
LoadResource
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlFillMemory
RtlMoveMemory
FreeResource
RtlZeroMemory
SetThreadContext
VerSetConditionMask
VirtualAllocEx
WriteProcessMemory
lstrcatW
lstrlenW
FindResourceA
ExitProcess
RtlUnwind
CreateProcessW
ntdll
ZwUnmapViewOfSection
advapi32
RegOpenKeyExW
RegSetValueExW
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE