Static task
static1
Behavioral task
behavioral1
Sample
bit_che_install.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bit_che_install.exe
Resource
win10v2004-20220812-en
General
-
Target
57bf8c25b26ca862b28e78bd96f496ffbed3cdfc06f9f2c3661fa5beb6473316
-
Size
393KB
-
MD5
19bc9d84452d1cab5f0eed07efa97d77
-
SHA1
10463935c3d8ccb5ae8742e58ba8f3a279b5aabd
-
SHA256
57bf8c25b26ca862b28e78bd96f496ffbed3cdfc06f9f2c3661fa5beb6473316
-
SHA512
aaec5f31556689ae2c57fa4448f74a1ec0612543c79cff5015a86090870a601b95bcf5dd710198a4432c525adfac886ec168d5f9192e1c7de515488bbf50f86e
-
SSDEEP
12288:5Zf1bS7qIRXeY/suM/p5jNRqqibIHnmTJWGgmi:5Zf1oq8OvPrHnmTJ/gZ
Malware Config
Signatures
Files
-
57bf8c25b26ca862b28e78bd96f496ffbed3cdfc06f9f2c3661fa5beb6473316.zip
-
bit_che_install.exe.exe windows x86
d75a825b797915f94227920e8b7cae73
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
RaiseException
SetFileAttributesA
GlobalDeleteAtom
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GlobalAlloc
GlobalAddAtomA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetAtomNameA
GetACP
FreeLibrary
FindFirstFileA
FindClose
DeleteFileA
DeleteAtom
CreateThread
CreateFileW
CloseHandle
AddAtomA
Sleep
GetModuleHandleW
SetUnhandledExceptionFilter
VirtualAllocEx
user32
IsRectEmpty
IsWindow
IsWindowVisible
LoadAcceleratorsA
LoadCursorA
LoadStringA
LoadStringW
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseDC
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetRectEmpty
SetWindowTextA
ShowWindow
TranslateAcceleratorA
TranslateMessage
IsClipboardFormatAvailable
InvalidateRect
InsertMenuA
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollRange
GetMessageA
GetMenu
GetKeyState
GetDlgItemTextA
GetDlgItem
GetDC
GetClipboardData
GetClientRect
EnumThreadWindows
EndDialog
EnableMenuItem
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
LoadIconW
LoadIconA
LoadCursorW
EnableScrollBar
gdi32
SetTextAlign
SetTextColor
GetStockObject
SetLayout
SetWindowOrgEx
TextOutA
TranslateCharsetInfo
SetBkMode
SelectObject
SetBkColor
PatBlt
SetWindowExtEx
GetEnhMetaFileA
GetLayout
GetDeviceCaps
DeleteObject
CreateMetaFileA
CreateFontIndirectA
CopyMetaFileA
CloseMetaFile
GetEnhMetaFileW
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegOpenKeyA
RegQueryValueExA
shell32
ShellExecuteExA
ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathFindExtensionW
msvcrt
_adjust_fdiv
strchr
memmove
exit
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 943KB - Virtual size: 943KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ