Static task
static1
Behavioral task
behavioral1
Sample
bcf9b1ccaff3824747ffe73d300bbd9f99e225531dcc7bf6a9a1e67942f2d391.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bcf9b1ccaff3824747ffe73d300bbd9f99e225531dcc7bf6a9a1e67942f2d391.exe
Resource
win10v2004-20220812-en
General
-
Target
bcf9b1ccaff3824747ffe73d300bbd9f99e225531dcc7bf6a9a1e67942f2d391
-
Size
370KB
-
MD5
e1b82335c2aea8aa5c2ca25ef43ea773
-
SHA1
92b623a7e0f16e5546f6821401a9efc9e90240cb
-
SHA256
bcf9b1ccaff3824747ffe73d300bbd9f99e225531dcc7bf6a9a1e67942f2d391
-
SHA512
5b226e916fc769a2a7ddea4b2ead02a55528004a9ca45d14421a51512d9d037b8e41663877f8a6ab777cfc8d9c9ff983af6b79c03ef4be0cffcd6f345f810940
-
SSDEEP
6144:1JGm1aZCkx2o4sGmn8rv4DNpTaQzRmPQ8QiG8AKMEvxkNGkfnCJ49ijMXC:1kFqon8rvgp49VMEZMfna49ijM
Malware Config
Signatures
Files
-
bcf9b1ccaff3824747ffe73d300bbd9f99e225531dcc7bf6a9a1e67942f2d391.exe windows x86
29c2cc0be673c0c4ecdfd689b6921eec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
FindVolumeClose
VirtualAlloc
InterlockedExchange
lstrlenA
FreeConsole
GetProcessHeap
CloseHandle
LocalSize
GetExitCodeProcess
GetMailslotInfo
ReadFile
GetDriveTypeW
LocalFree
GlobalFree
CreateThread
ResetEvent
GetPrivateProfileIntW
GetModuleHandleW
ReleaseMutex
user32
SetFocus
GetCursorInfo
GetSysColor
GetDlgItem
CreateWindowExA
DispatchMessageA
CallWindowProcA
GetClassInfoA
GetMenu
GetKeyState
DrawStateW
EndDialog
GetClientRect
clbcatq
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
desk.cpl
InstallScreenSaverA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ