Static task
static1
Behavioral task
behavioral1
Sample
bce957575723ead67fa114d092555b0d426d191754ac3b079797096780d3c458.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bce957575723ead67fa114d092555b0d426d191754ac3b079797096780d3c458.exe
Resource
win10v2004-20220812-en
General
-
Target
bce957575723ead67fa114d092555b0d426d191754ac3b079797096780d3c458
-
Size
42KB
-
MD5
381aecf23665e9727f0e8415b4ba20f0
-
SHA1
c1ed4b7da0878dd86d35072c301d7f170f56d433
-
SHA256
bce957575723ead67fa114d092555b0d426d191754ac3b079797096780d3c458
-
SHA512
c9a967c45f2b0449c6ad55db921ec1b2d6cc7d393983b4e7dc2cf0a139e242e991fee652186a138ddb225b3a3c2177cfd634e4280530542a61c8450fbf0d004a
-
SSDEEP
768:GWZiWJmG/IqEafXyHIyY99VCxK8s+mEHliXaEjn1Hz:G5vs/orY99V0HsDEF+aEjnd
Malware Config
Signatures
Files
-
bce957575723ead67fa114d092555b0d426d191754ac3b079797096780d3c458.exe windows x86
972e07e0afa2da05c674d18b4363f606
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
TransparentBlt
DllInitialize
GradientFill
certcli
CACloseCA
CAEnumNextCA
CADeleteCA
kernel32
GetEnvironmentVariableW
GetConsoleAliasW
GetCurrentProcess
ReadConsoleA
CloseHandle
MoveFileW
SleepEx
GetProcessHeap
QueryDosDeviceW
GetFullPathNameA
MoveFileW
LoadLibraryA
GetShortPathNameA
lstrcmpiA
CreateNamedPipeA
GetTimeFormatA
GetCurrentDirectoryA
GetProcAddress
GetTickCount
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ