Static task
static1
Behavioral task
behavioral1
Sample
bc025b5c64768eaa003b0d23c0c87abefc2e7fa5b3b543961f9d983004be840a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc025b5c64768eaa003b0d23c0c87abefc2e7fa5b3b543961f9d983004be840a.exe
Resource
win10v2004-20220901-en
General
-
Target
bc025b5c64768eaa003b0d23c0c87abefc2e7fa5b3b543961f9d983004be840a
-
Size
138KB
-
MD5
6ad01dc0fc65165f7cb7c593e43a6bb7
-
SHA1
8145084af6cc40af02b34210e33d98dac7137a4b
-
SHA256
bc025b5c64768eaa003b0d23c0c87abefc2e7fa5b3b543961f9d983004be840a
-
SHA512
cd7143a21947b13efbd1466f22992dfecec00c5af3dc1d00e696463f4906f6e5cdfafa36235a4a687cc990a45cb3077bf140b8be4c6c1ef554de50c6df3698e9
-
SSDEEP
3072:nwLmzhMe7e/8Q/dxAuhv5fwFcicn8qZDR4qDaJRpuB:wL15/HAuhhfwFcia8UR4quzpuB
Malware Config
Signatures
Files
-
bc025b5c64768eaa003b0d23c0c87abefc2e7fa5b3b543961f9d983004be840a.exe windows x86
c130a2a20d4971a6eef1840a6164aca0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateTokenEx
ImpersonateLoggedOnUser
RegOpenCurrentUser
Sections
0 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4Q3l3 Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ