Static task
static1
Behavioral task
behavioral1
Sample
bc3d3dfb17f7d9cca77ef55adb54d573775e10a045f8511ffa73352ee46a1f38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc3d3dfb17f7d9cca77ef55adb54d573775e10a045f8511ffa73352ee46a1f38.exe
Resource
win10v2004-20220812-en
General
-
Target
bc3d3dfb17f7d9cca77ef55adb54d573775e10a045f8511ffa73352ee46a1f38
-
Size
118KB
-
MD5
31e6983012c235fc105317967607c942
-
SHA1
7627c3cb2bc8e5ea9393dd4290087f65303bb119
-
SHA256
bc3d3dfb17f7d9cca77ef55adb54d573775e10a045f8511ffa73352ee46a1f38
-
SHA512
9a99767455fb1bc52ab065788474bf794a6c8c0d940db53becd9959570c8c23c410a3cccfe5fde4128f12a661d3cd452c4d20d29de0896c0ac0478a2fa8f3357
-
SSDEEP
3072:lGHLM6NEbBFEFqCPThogstAL/lYA0eaNC:lsw6OBF2qCPThozK93SN
Malware Config
Signatures
Files
-
bc3d3dfb17f7d9cca77ef55adb54d573775e10a045f8511ffa73352ee46a1f38.exe windows x86
d3cf59a86fd997e87fa2c0db302f1483
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
ConnectNamedPipe
CreateEventA
CreateRemoteThread
DeleteAtom
DeleteFileA
ExitProcess
FindAtomA
FindFirstChangeNotificationA
FindResourceA
FoldStringA
GetAtomNameA
GetCommandLineA
GetDiskFreeSpaceExA
GetHandleInformation
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetNamedPipeInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetThreadTimes
HeapAlloc
IsBadReadPtr
IsBadWritePtr
LocalFree
LocalSize
MapViewOfFileEx
MoveFileExA
PulseEvent
PurgeComm
ReadProcessMemory
SetFilePointer
SetUnhandledExceptionFilter
UpdateResourceA
VirtualLock
VirtualQueryEx
VirtualUnlock
WritePrivateProfileStringA
WriteProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fread
free
fseek
malloc
memset
rand
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE