Static task
static1
Behavioral task
behavioral1
Sample
bc9e23e4da49645bf95f9669001659a5151008dd4ec34318a934b0b98cb1f1c1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc9e23e4da49645bf95f9669001659a5151008dd4ec34318a934b0b98cb1f1c1.exe
Resource
win10v2004-20220812-en
General
-
Target
bc9e23e4da49645bf95f9669001659a5151008dd4ec34318a934b0b98cb1f1c1
-
Size
194KB
-
MD5
d20a382efe8af3c47f6d153d8d188aed
-
SHA1
5bba7c16cd319d0d1358cfbe663e39b0964a6d04
-
SHA256
bc9e23e4da49645bf95f9669001659a5151008dd4ec34318a934b0b98cb1f1c1
-
SHA512
d3f05a3fe64d54e3ab01890ef56117a7447b6d392446ba89e2f39365b57464333d38a11591b2c5826dfd76097c3c5de981afb9dd84915f6742520cef77429c70
-
SSDEEP
6144:9lOicAX2yhhhXUKGtUjLbDBs1DuZRh8+34:9lBcAX2uSibD0aZRut
Malware Config
Signatures
Files
-
bc9e23e4da49645bf95f9669001659a5151008dd4ec34318a934b0b98cb1f1c1.exe windows x86
56099118e98d247d82887e18c60de40d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
StringFromIID
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
advapi32
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyA
RegSetValueExA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
kernel32
VirtualQueryEx
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
EnumResourceNamesA
CreateProcessA
lstrlenA
LocalAlloc
OpenJobObjectW
RaiseException
InterlockedExchange
shlwapi
PathFileExistsW
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ