Static task
static1
Behavioral task
behavioral1
Sample
bc5afe16a8f1c4c8e8689a68a5af99976dfb3bbcf12f5fd058e9b67b64cea987.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc5afe16a8f1c4c8e8689a68a5af99976dfb3bbcf12f5fd058e9b67b64cea987.exe
Resource
win10v2004-20220812-en
General
-
Target
bc5afe16a8f1c4c8e8689a68a5af99976dfb3bbcf12f5fd058e9b67b64cea987
-
Size
324KB
-
MD5
af4cad25a3ec4e91ace7134104107dbb
-
SHA1
3f8e216c7ccf549ad85ce681d7dbe2c376424327
-
SHA256
bc5afe16a8f1c4c8e8689a68a5af99976dfb3bbcf12f5fd058e9b67b64cea987
-
SHA512
26c46ba1b68d6c10f2724f261ae699c5a6ccbdd413bd2b0464017b37824679b6ff09f8c5983f3bf86b1f58084f9077521f92680097d44af925350a092c869d3a
-
SSDEEP
6144:C19jeSKCbi8H8WrT3+ANDFpbTTNFGLi9oH2VS3dFW4tc8QRN9BY:C7eTC+qRv3+ABTTNEiW6S3dJeDBY
Malware Config
Signatures
Files
-
bc5afe16a8f1c4c8e8689a68a5af99976dfb3bbcf12f5fd058e9b67b64cea987.exe windows x86
f374e9b2c3c7e38e1008349860662781
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CloseHandle
CreateFileA
Sleep
VirtualAlloc
GetProcAddress
GetCurrentProcess
CreateMutexA
LoadLibraryExA
GetLastError
VirtualAllocEx
GetTickCount
GetSystemInfo
VirtualProtect
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
SetEndOfFile
ReadFile
SetFilePointer
SetStdHandle
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualQuery
msacm32
acmDriverDetailsA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ