Static task
static1
Behavioral task
behavioral1
Sample
bd5643ca30419839a0dd1615ca2582d4fe15d2c0f53defff64269b03c2f42c39.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd5643ca30419839a0dd1615ca2582d4fe15d2c0f53defff64269b03c2f42c39.exe
Resource
win10v2004-20221111-en
General
-
Target
bd5643ca30419839a0dd1615ca2582d4fe15d2c0f53defff64269b03c2f42c39
-
Size
1.4MB
-
MD5
13aa4e9e346a0762a35337fbf3d7fcd6
-
SHA1
e6c55c1698f01eb01f2283d6bca6bc3a8be30dc8
-
SHA256
bd5643ca30419839a0dd1615ca2582d4fe15d2c0f53defff64269b03c2f42c39
-
SHA512
f7b99a3031743fcc8236e4e3c590e710d77465c356d6018a58a2af6c73d053146c70a33fc8f45627cb4f9e54aaf8f99e5c421e31ffda0df1a4a0a20355d26d8a
-
SSDEEP
24576:puREeH7RILNX/eO4qfuREeH7NxqdaP+hH0F1tGrqnjlr6QpI:yZH6EO4rZH2UPM0FGOVBG
Malware Config
Signatures
Files
-
bd5643ca30419839a0dd1615ca2582d4fe15d2c0f53defff64269b03c2f42c39.exe windows x86
b187f433281e36231fb2e7054a7b6aa3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetFileAttributesA
GetLastError
IsDBCSLeadByteEx
MultiByteToWideChar
SetUnhandledExceptionFilter
msvcrt
_access
_chdir
_chmod
_close
_creat
_fdopen
_isatty
_mktemp
_open
_pclose
_popen
_read
_rmdir
_setmode
_utime
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_access
_assert
_cexit
_chmod
_errno
_filbuf
_filelengthi64
_findclose
_findfirst
_findnext
_flsbuf
_fstati64
_fullpath
_iob
_isctype
_lseeki64
_mkdir
_onexit
_pctype
_setmode
_stati64
_unlink
abort
atexit
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
getenv
gmtime
iswctype
localtime
malloc
memchr
memcpy
memset
perror
printf
putchar
puts
raise
realloc
rename
setbuf
signal
sprintf
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strrchr
system
time
tolower
vfprintf
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ