Static task
static1
Behavioral task
behavioral1
Sample
bc1ff9560aa98501747407114d02368eca94fbc663502f1e5da281561920e200.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc1ff9560aa98501747407114d02368eca94fbc663502f1e5da281561920e200.dll
Resource
win10v2004-20220812-en
General
-
Target
bc1ff9560aa98501747407114d02368eca94fbc663502f1e5da281561920e200
-
Size
276KB
-
MD5
931fa431b360751ee8da7d78e6388738
-
SHA1
88c8793cc8713e3b83d371ed9a8e4ce323c5a0dc
-
SHA256
bc1ff9560aa98501747407114d02368eca94fbc663502f1e5da281561920e200
-
SHA512
5570516c569f48f114fe4ac7f6577bb891eb65f41b1e03ae7829fe6a709bf0355b6637798ccc020c0b541e20b9a46bdeb7a066ab959ac8c0ec82035c3bbde98c
-
SSDEEP
3072:GxuY/Xub2QqXHUL4YLS2zGS6bG+gWMOBL/a0qKNrthQtuGuXv:GUY/+iDHUcYLSS5jWMObqKN5n
Malware Config
Signatures
Files
-
bc1ff9560aa98501747407114d02368eca94fbc663502f1e5da281561920e200.dll windows x86
5273a8a94c33ac74653f5f35a4df599f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80
ord764
ord1175
ord762
ord1098
ord1084
ord371
msvcr80
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
__CppXcptFilter
free
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__clean_type_info_names_internal
kernel32
LoadLibraryA
GetProcAddress
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetVersionExA
InterlockedExchange
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ