Static task
static1
Behavioral task
behavioral1
Sample
bd1f49a8fb5d61263edbf730c5478ab7faf2e1c2715b21c60981e4fd1543e60c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd1f49a8fb5d61263edbf730c5478ab7faf2e1c2715b21c60981e4fd1543e60c.exe
Resource
win10v2004-20220812-en
General
-
Target
bd1f49a8fb5d61263edbf730c5478ab7faf2e1c2715b21c60981e4fd1543e60c
-
Size
544KB
-
MD5
27e3e5d5c6972cc22ece7b51099fdc60
-
SHA1
f72b322d4c45b730824b79da01007a155245db22
-
SHA256
bd1f49a8fb5d61263edbf730c5478ab7faf2e1c2715b21c60981e4fd1543e60c
-
SHA512
822c03f7a9d35b3947376ddd4071bff04cb2cef163fd5b7dad4b1d56cbd75871c97bc7285508a580f645092b1297cdec805c58e6061767479eadbd45bee6dadd
-
SSDEEP
12288:jTpzvuQ30Sz4FvQCr+BTfZ+BxIuQMas1q40vCwReAEQ:PpzB46CrKZ+Mu/11q40vpRzE
Malware Config
Signatures
Files
-
bd1f49a8fb5d61263edbf730c5478ab7faf2e1c2715b21c60981e4fd1543e60c.exe windows x86
2e8ec6596e481e851165e7943df52fe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetLastError
SetFilePointer
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
SetEndOfFile
LCMapStringA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetOEMCP
HeapReAlloc
GetCPInfo
CreateFileA
GetACP
FlushFileBuffers
SetStdHandle
CloseHandle
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStrings
ReadFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualFree
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
user32
EndDialog
DrawTextA
BeginPaint
GetClientRect
DestroyWindow
EndPaint
DefWindowProcA
CreateWindowExA
DialogBoxParamA
PostQuitMessage
UpdateWindow
SetTimer
ShowWindow
RegisterClassExA
LoadIconA
LoadCursorA
GetMessageA
LoadStringA
LoadAcceleratorsA
DispatchMessageA
TranslateAcceleratorA
TranslateMessage
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE