Static task
static1
Behavioral task
behavioral1
Sample
bc531aee7e6f53f3db1f25cc54c76b02a82ef7f968589d786c287d2f1620cb06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc531aee7e6f53f3db1f25cc54c76b02a82ef7f968589d786c287d2f1620cb06.exe
Resource
win10v2004-20220812-en
General
-
Target
bc531aee7e6f53f3db1f25cc54c76b02a82ef7f968589d786c287d2f1620cb06
-
Size
172KB
-
MD5
fffb70ef9840b51513bc1328c5712f11
-
SHA1
4445d0d7509e32672cb684d7f8f9694c567e7d3f
-
SHA256
bc531aee7e6f53f3db1f25cc54c76b02a82ef7f968589d786c287d2f1620cb06
-
SHA512
a26707daf0c17ad5b6793c22fec03c20078e2e36e047732e3edb975ea83ae24b8128b58cb369e2e1b1e40300a64fad856cac4ba6016cbca0de03d02b7caead0a
-
SSDEEP
3072:DsrH6IuIH1p7rnku9O+DecxpjKGyshoinNEWBK5HQCOtI6QV5J3Jm29:DI6sH1p7rnkufDecSGysOinabhB6QVj3
Malware Config
Signatures
Files
-
bc531aee7e6f53f3db1f25cc54c76b02a82ef7f968589d786c287d2f1620cb06.exe windows x86
e77418db38f29fa8c909d9295cd737be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashA
kernel32
GlobalAddAtomW
GetTimeZoneInformation
LeaveCriticalSection
IsDBCSLeadByte
OutputDebugStringA
GetFullPathNameW
SetEvent
Sleep
WaitForSingleObject
GetProcAddress
EnumResourceNamesA
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
VerLanguageNameA
DeleteCriticalSection
EnterCriticalSection
CreateThread
GetTempPathA
LoadLibraryW
GetTickCount
InitializeCriticalSection
ResetEvent
lstrcpyA
FreeLibrary
winmm
mciSendCommandA
sndPlaySoundA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ