Static task
static1
Behavioral task
behavioral1
Sample
bce92a5d9f8728d92be64f1816078ab27be8e4d69bcf1adcbd3d2c033bcd0197.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bce92a5d9f8728d92be64f1816078ab27be8e4d69bcf1adcbd3d2c033bcd0197.exe
Resource
win10v2004-20220901-en
General
-
Target
bce92a5d9f8728d92be64f1816078ab27be8e4d69bcf1adcbd3d2c033bcd0197
-
Size
177KB
-
MD5
351197ea583fe5f67283687d9822b00f
-
SHA1
f855dad2fdd60856ca82bb6a2c8cb7de1e34110b
-
SHA256
bce92a5d9f8728d92be64f1816078ab27be8e4d69bcf1adcbd3d2c033bcd0197
-
SHA512
a0cdbcc4a4d1827d2ad34196e8e096abeaa8d96c1d5ef2ed84746afd29a2342c758755828a3dc94f00bc2c6ae6b5e9b8006551bc2ac3585082efca5260975c62
-
SSDEEP
3072:9g9aoLPeaKSlrkDrBuiprsSI7KMZy8LAw2I9lA6cNbc4YM0RPLhg:zoLsxDrB+SIuMX72ccNb4M0Rt
Malware Config
Signatures
Files
-
bce92a5d9f8728d92be64f1816078ab27be8e4d69bcf1adcbd3d2c033bcd0197.exe windows x86
8f34c4569a2db23523c14e70ef17303e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCalendarInfoA
CreateDirectoryW
GetConsoleMode
GetProcessHeap
CreateThread
ExitProcess
MapViewOfFile
LoadLibraryExW
MoveFileExW
GetVersionExW
GetModuleHandleA
WaitForSingleObject
GetModuleHandleW
FlushFileBuffers
GetConsoleCP
CreateFileA
CreateProcessW
TlsGetValue
EnumResourceNamesA
GetVersionExA
HeapAlloc
UnmapViewOfFile
InterlockedIncrement
CreateFileW
WriteConsoleW
FindFirstFileW
HeapFree
CreateFileMappingA
SetEvent
TlsAlloc
TlsFree
GetExitCodeProcess
TlsSetValue
GetEnvironmentVariableW
GetProcAddress
GetTempPathW
SetLastError
GetLastError
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ