Static task
static1
Behavioral task
behavioral1
Sample
bc7f37779e2f5cc23ac4eeb3472a4896b57740f0c56130e83095426d93f864fa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc7f37779e2f5cc23ac4eeb3472a4896b57740f0c56130e83095426d93f864fa.exe
Resource
win10v2004-20221111-en
General
-
Target
bc7f37779e2f5cc23ac4eeb3472a4896b57740f0c56130e83095426d93f864fa
-
Size
9KB
-
MD5
e2523fb61df6a19e4ac208cbf7728a63
-
SHA1
b117a4a3187d3871500c8e554b029f0af254d606
-
SHA256
bc7f37779e2f5cc23ac4eeb3472a4896b57740f0c56130e83095426d93f864fa
-
SHA512
272046679e1dde9545495c6245b4114d988bbeeb57003a3658d77a62b84c0a59f50cc8b978a7504ab813704afca6a03c9af376c02233df625bdf55d1f2348a94
-
SSDEEP
192:1lBwHV8T6YCNKGFttArJpYZd5ftLGxsWmtFcrlp:1lBwHm1OWrJpYZ3fQsWmjcrlp
Malware Config
Signatures
Files
-
bc7f37779e2f5cc23ac4eeb3472a4896b57740f0c56130e83095426d93f864fa.exe windows x86
559398b1246f3c18c513f21a971018a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersionExA
GetModuleFileNameA
WaitForSingleObject
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
CreateProcessA
user32
CharLowerA
msvcrt
malloc
strstr
free
fclose
_filbuf
ftell
fseek
fopen
Sections
OBIlt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE