Static task
static1
Behavioral task
behavioral1
Sample
bc1b8a4fafbf464dcae88ef870e2dac2e63edb03a219d0ea8549b1ac1d72b9f1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bc1b8a4fafbf464dcae88ef870e2dac2e63edb03a219d0ea8549b1ac1d72b9f1.exe
Resource
win10v2004-20220812-en
General
-
Target
bc1b8a4fafbf464dcae88ef870e2dac2e63edb03a219d0ea8549b1ac1d72b9f1
-
Size
92KB
-
MD5
08351c8ba5820b56b6724df7f02fad8a
-
SHA1
5854d2b43b489151d1f57300b8b301e4ea2cf09f
-
SHA256
bc1b8a4fafbf464dcae88ef870e2dac2e63edb03a219d0ea8549b1ac1d72b9f1
-
SHA512
6c3d818d05551b21eadd5fb09b03ecdb8bb6ca5b42c1ccd748636e30e37b8950318e4cda7dd1590098bc51f1654124fe91547da0b821abe89431e708731753cb
-
SSDEEP
1536:jXOrMYtaaMDz14zayp+7iCi0HS0cOFcl5J/skj+t:jOxtaUzaX7Ti0EX5uPt
Malware Config
Signatures
Files
-
bc1b8a4fafbf464dcae88ef870e2dac2e63edb03a219d0ea8549b1ac1d72b9f1.exe windows x86
a536aafb18c31bf3fe560bdeff75f7fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CalcMenuBar
LoadCursorA
GetDlgItem
DrawIconEx
AlignRects
GetDC
CloseWindow
IsMenu
IsWindow
DrawIcon
InsertMenuA
GetWindowTextLengthA
GetWindowTextA
DialogBoxParamW
DialogBoxParamA
CopyImage
CopyRect
IsMenu
DrawIconEx
DialogBoxParamA
InsertMenuA
LoadCursorA
CalcMenuBar
AlignRects
CopyRect
GetWindowTextLengthA
AppendMenuW
GetDC
DrawIcon
CopyIcon
BlockInput
CopyImage
GetWindowTextA
comctl32
ImageList_DragMove
ImageList_Destroy
ImageList_AddMasked
ImageList_Copy
ImageList_Draw
ImageList_GetImageInfo
ImageList_Replace
ImageList_Create
InitCommonControls
ImageList_AddIcon
ImageList_Remove
ImageList_Read
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetImageRect
ImageList_EndDrag
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_BeginDrag
ImageList_Merge
kernel32
HeapAlloc
GetDateFormatA
GetCommandLineA
GetFileType
GetStringTypeA
GetLocalTime
GetLastError
lstrcpyA
Sleep
GlobalAlloc
FreeLibrary
DeleteFileA
CloseHandle
HeapFree
GetModuleHandleA
lstrcpynA
GetStringTypeW
advapi32
RegOpenKeyExA
RegQueryValueA
RegQueryValueExW
RegEnumKeyExA
RegFlushKey
RegDeleteKeyA
RegEnumValueA
RegEnumValueW
RegCreateKeyW
RegDeleteValueW
RegGetKeySecurity
RegOpenKeyW
RegEnumKeyW
RegOpenKeyA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyExW
RegQueryValueW
RegLoadKeyW
Sections
.Qyrfu Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ZxNGq Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tzjeNS Size: 7KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.splVv Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vrfIP Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_READ