Static task
static1
Behavioral task
behavioral1
Sample
bdf9ba418ba59155d9a604963f4b582a7151f01eb08d8966a4575004d1f8bacb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdf9ba418ba59155d9a604963f4b582a7151f01eb08d8966a4575004d1f8bacb.exe
Resource
win10v2004-20220812-en
General
-
Target
bdf9ba418ba59155d9a604963f4b582a7151f01eb08d8966a4575004d1f8bacb
-
Size
320KB
-
MD5
a35ebc4e7b1b2d5833adf908c501ba10
-
SHA1
1e22bec6a67e871e785b53705fb6ff9387261e41
-
SHA256
bdf9ba418ba59155d9a604963f4b582a7151f01eb08d8966a4575004d1f8bacb
-
SHA512
0866fd27eae3a65cbbc7cb67afe7f2df3915347161bc1c734cefb10cabb2b52f068fdac1d9bc770e7c20981e3ee0ce223176e26f686fdb375e2e17c04f2aa4fc
-
SSDEEP
6144:s+DbIKwuAbWDH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:TI5ar2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
bdf9ba418ba59155d9a604963f4b582a7151f01eb08d8966a4575004d1f8bacb.exe windows x86
8519fded02aa3c44f68000059202ec17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectA
VDMConsoleOperation
WritePrivateProfileSectionA
InitAtomTable
LockFileEx
ContinueDebugEvent
LocalCompact
SetConsoleInputExeNameW
ReadConsoleOutputAttribute
PrivCopyFileExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE