Static task
static1
Behavioral task
behavioral1
Sample
bec740601ef638e03a586703d6e07fc161b4c8ade3f9a9a4c75657ee66dafb25.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bec740601ef638e03a586703d6e07fc161b4c8ade3f9a9a4c75657ee66dafb25.exe
Resource
win10v2004-20221111-en
General
-
Target
bec740601ef638e03a586703d6e07fc161b4c8ade3f9a9a4c75657ee66dafb25
-
Size
44KB
-
MD5
c8e8a136c5420398d9c19aece44e2faf
-
SHA1
19e9afd56a4092fbf33140c6d4118f762c9821b3
-
SHA256
bec740601ef638e03a586703d6e07fc161b4c8ade3f9a9a4c75657ee66dafb25
-
SHA512
ecd32030e98752664f0c71f7f26b27eca40e9bc216bf9cb09296a9719e044bfad3cba6f530614426ebf47b90e9835476007ebcc978164215f0186d2859f7885b
-
SSDEEP
384:xbHvrB4bc79wZaJld61qVO7UFEbE0S8Skhek93pMdLLUzTZ4Bw5:xbzBq+QaJldfFqEZ8vek93wLL0Z4W5
Malware Config
Signatures
Files
-
bec740601ef638e03a586703d6e07fc161b4c8ade3f9a9a4c75657ee66dafb25.exe windows x86
2dd42c77e09b7a7683d784b2aba6d617
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
lstrcmpiA
lstrcpyA
WritePrivateProfileStringA
GetFileAttributesA
LoadLibraryA
lstrcatA
GetPrivateProfileStringA
GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
FreeLibrary
GetProcAddress
lstrlenA
DeleteFileA
GetCurrentProcess
DuplicateHandle
GetShortPathNameA
GetCommandLineA
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateThread
CreateDirectoryA
MoveFileExA
GetSystemDirectoryA
ExitProcess
GetTickCount
user32
CloseClipboard
EmptyClipboard
OpenClipboard
IsWindow
keybd_event
VkKeyScanA
GetClassNameA
GetWindowTextA
MessageBoxA
wsprintfA
SetClipboardData
GetForegroundWindow
GetWindowLongA
advapi32
OpenProcessToken
LookupPrivilegeValueA
shell32
SHGetSpecialFolderPathA
msvcrt
sprintf
??2@YAPAXI@Z
srand
rand
_strlwr
strstr
netapi32
Netbios
wininet
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
ws2_32
htons
inet_addr
connect
socket
WSAStartup
WSACleanup
gethostbyname
gethostname
closesocket
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE