TMethodImplementationIntercept
Static task
static1
Behavioral task
behavioral1
Sample
1d4329b31af08ea10c5e7e6b5d9c17aee53a9daa012fd0b6630b47d8ef2e1793.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d4329b31af08ea10c5e7e6b5d9c17aee53a9daa012fd0b6630b47d8ef2e1793.exe
Resource
win10v2004-20220812-en
General
-
Target
1d4329b31af08ea10c5e7e6b5d9c17aee53a9daa012fd0b6630b47d8ef2e1793
-
Size
8.0MB
-
MD5
bc16ec34e89caef2c1abcae454d60096
-
SHA1
d92b5d3760c91addb5d976b68d3e52a406c9867c
-
SHA256
1d4329b31af08ea10c5e7e6b5d9c17aee53a9daa012fd0b6630b47d8ef2e1793
-
SHA512
1b399412dfefa81ab740717290cb1ace409efd0eaae3076fb0aaf6e0a2ccb3761b6b15ec65cb51ada1c171d0ba555156577ad6c65c428424f20a936d32fa4ccf
-
SSDEEP
196608:klYvwh1TeM6E5EUucNoNyukgk4Ty9vB2hf1n:YYvGpeO1yyukg2H23
Malware Config
Signatures
Files
-
1d4329b31af08ea10c5e7e6b5d9c17aee53a9daa012fd0b6630b47d8ef2e1793.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 1.5MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.1MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
blsepkbi Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bilbwzeu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE