Static task
static1
Behavioral task
behavioral1
Sample
bc28f00a4c8492a172f1fe01fbcaebef87d57c54df077c9538dddcd46d0940a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc28f00a4c8492a172f1fe01fbcaebef87d57c54df077c9538dddcd46d0940a0.exe
Resource
win10v2004-20220901-en
General
-
Target
bc28f00a4c8492a172f1fe01fbcaebef87d57c54df077c9538dddcd46d0940a0
-
Size
499KB
-
MD5
52275a696705f67538a3973e3d648420
-
SHA1
31a3bf04fc7aedb12648e062ca2be710fffc7ace
-
SHA256
bc28f00a4c8492a172f1fe01fbcaebef87d57c54df077c9538dddcd46d0940a0
-
SHA512
d1efc944bb8f6ba6d5ac7701d834810ce872793b520a2cc8da832b4dc1454fc1077d378fcc5806e64ba2946d02011ac66c424a00fe3932e6fe2f6e4bd69f810a
-
SSDEEP
6144:6keXkyYfwi9xE31QlXEDyk+OOvCeE7JiR3EZFjf2a119ILlhKe+TP:D+PmwgoG9EDyEaVE7kEHjfR112Llhx+
Malware Config
Signatures
Files
-
bc28f00a4c8492a172f1fe01fbcaebef87d57c54df077c9538dddcd46d0940a0.exe windows x86
b650877f03ab1a82b43f60b244144a17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
CancelIo
lstrlenA
GetModuleHandleA
IsDebuggerPresent
GetStartupInfoA
GetStdHandle
ResumeThread
TlsGetValue
ReleaseMutex
GetACP
GetDriveTypeA
IsBadStringPtrA
SuspendThread
HeapCreate
TlsAlloc
GetEnvironmentVariableA
CreateFileMappingA
GetModuleFileNameA
CreateFileA
advapi32
CreateProcessAsUserA
RegDeleteValueA
InitializeSid
ControlService
IsTextUnicode
IsValidSecurityDescriptor
RegEnumKeyA
RegQueryValueW
CreateServiceW
IsValidSid
ClearEventLogW
IsValidAcl
RegCreateKeyExW
usbui
USBErrorHandler
USBErrorHandler
USBErrorHandler
USBErrorHandler
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ