Static task
static1
Behavioral task
behavioral1
Sample
bd0399007085b86f5cab60b2472c64bc8f5b83c36f26953af56f340aff4d80d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd0399007085b86f5cab60b2472c64bc8f5b83c36f26953af56f340aff4d80d8.exe
Resource
win10v2004-20221111-en
General
-
Target
bd0399007085b86f5cab60b2472c64bc8f5b83c36f26953af56f340aff4d80d8
-
Size
30KB
-
MD5
04cea89fe250f5f2bba84574ad3fd8e6
-
SHA1
4be957463daaa5e5022ab6325cd43cd799ac6062
-
SHA256
bd0399007085b86f5cab60b2472c64bc8f5b83c36f26953af56f340aff4d80d8
-
SHA512
459a71ab9832be2f0bdf38744bb2b461e63139eef82f83096daa74414eb11423a23df428da358c9bbe5843f9cdbc3248548e33989e5f9e170150f3fc507b5b49
-
SSDEEP
768:e5NcVHoq7CCELUOBxfgMN066F/ZpIu76KyQ5eZ568:e5OMDLUOBeMN0/F/rNJoX68
Malware Config
Signatures
Files
-
bd0399007085b86f5cab60b2472c64bc8f5b83c36f26953af56f340aff4d80d8.exe windows x86
a97a713b14ee0e70f595edd356bb6431
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWriteWatch
VirtualLock
ClearCommError
GetStringTypeExA
SetConsoleScreenBufferSize
GetExitCodeProcess
WriteFileGather
GetProcessHeaps
SleepEx
ExitVDM
RegisterConsoleVDM
SetEvent
GetSystemTime
GetFileType
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 22KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ