Static task
static1
Behavioral task
behavioral1
Sample
bc316c3d58807d54bc9c0dc1874769a6c778a20487078e868e0c9473026627f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc316c3d58807d54bc9c0dc1874769a6c778a20487078e868e0c9473026627f0.exe
Resource
win10v2004-20220901-en
General
-
Target
bc316c3d58807d54bc9c0dc1874769a6c778a20487078e868e0c9473026627f0
-
Size
222KB
-
MD5
f7e5e749734ed620e7328a247d730a2c
-
SHA1
b147f0f7f126757f52d23316a1d0d548aa27ae64
-
SHA256
bc316c3d58807d54bc9c0dc1874769a6c778a20487078e868e0c9473026627f0
-
SHA512
8731849b30a00acab27649a910d6cb8c23290eb4a58b07f3b7899c45e7ff1a848831e0b5211832197d49d9707880429a65ad79d409e322314b815bdafd216b96
-
SSDEEP
3072:DVGISvtbxO8A5QgeheCgAgdWh8YwqHi1B9ccy4uSDJ3W9OPOXkDWJC6N:DEA53AeXEH4sy4g5Wz
Malware Config
Signatures
Files
-
bc316c3d58807d54bc9c0dc1874769a6c778a20487078e868e0c9473026627f0.exe windows x86
332df9ef2aafdf044b440407d76c7dd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
fmod
_putwch
_wtol
__set_app_type
ungetwc
_swab
_except_handler3
_vscprintf
_snwprintf
_fdopen
srand
_ismbclower
perror
_fstat
strtoul
_wtempnam
_ungetch
memcpy
_snscanf
_controlfp
getchar
__p__commode
_commit
wcsrchr
_wsearchenv
longjmp
__setusermatherr
__getmainargs
_wspawnvp
_adjust_fdiv
_XcptFilter
sscanf
_ismbcl0
clock
exit
_mbsncoll
_exit
puts
getc
_acmdln
localtime
isleadbyte
__p__fmode
_lrotl
isupper
mktime
_ecvt
_fstati64
_lock
kernel32
CreateFileA
HeapCreate
GetTimeFormatA
GetDriveTypeA
ReadFile
HeapAlloc
CreateFileMappingA
LoadLibraryA
GetComputerNameW
GetOEMCP
ResumeThread
ReadProcessMemory
SetThreadAffinityMask
TlsFree
IsBadReadPtr
SetEndOfFile
GetEnvironmentStringsW
SetEvent
GetCurrentDirectoryA
LCMapStringA
GlobalMemoryStatus
GetModuleHandleA
WideCharToMultiByte
GetModuleFileNameA
FileTimeToSystemTime
FindClose
CreateEventW
GetStartupInfoA
UnmapViewOfFile
LeaveCriticalSection
DeleteFileA
DeviceIoControl
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ