Static task
static1
Behavioral task
behavioral1
Sample
bdea701e32788cbfe127d068505eb3601816c5e753fd573241680452c27829fc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bdea701e32788cbfe127d068505eb3601816c5e753fd573241680452c27829fc.exe
Resource
win10v2004-20220901-en
General
-
Target
bdea701e32788cbfe127d068505eb3601816c5e753fd573241680452c27829fc
-
Size
126KB
-
MD5
414878e2104bc5e4c5e970d5bb6bc1f0
-
SHA1
9cdf0e0fdf256663c9d6005f06eb76b40de075e3
-
SHA256
bdea701e32788cbfe127d068505eb3601816c5e753fd573241680452c27829fc
-
SHA512
d93d01fa642d1f3402b6af0b888be8b449faf20e1ec8dc5b547a91be69ff4860e24e481c4c6e750a3e7d49591153dea7f028ff95f30bbc57fd9a1143d7c88ee2
-
SSDEEP
3072:/CJsA6IgovUaLpgY8/LnsXlhFHbLTkG+Cq9g:/CJT6IbMYqYXlTHPcCqy
Malware Config
Signatures
Files
-
bdea701e32788cbfe127d068505eb3601816c5e753fd573241680452c27829fc.exe windows x86
9fbf7ae8704c579766f5c94f477074c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
GetConsoleTitleA
EnumResourceTypesW
CancelIo
VirtualProtectEx
LocalFree
IsDebuggerPresent
GetDiskFreeSpaceExA
ResetEvent
GetModuleHandleA
IsBadStringPtrA
lstrlenA
LoadLibraryExW
Heap32First
GetStdHandle
SetLastError
TlsGetValue
IsBadReadPtr
CloseHandle
GetLastError
user32
GetMessageA
CopyImage
CloseWindow
GetMessageA
GetKeyState
DialogBoxParamA
CreateWindowExA
GetParent
GetUpdateRect
EnumWindows
DragDetect
IsIconic
EndDialog
MessageBoxA
setupapi
IsUserAdmin
MyMalloc
MyFree
MyRealloc
InstallCatalog
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ