Static task
static1
Behavioral task
behavioral1
Sample
bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e.exe
Resource
win10v2004-20220812-en
General
-
Target
bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e
-
Size
348KB
-
MD5
93130ffbb52ddd551dc5b0204792696e
-
SHA1
6423ca9fcdaf040656de35fcc20b939ec9531964
-
SHA256
bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e
-
SHA512
5127828a56e8841e40b27626dc965b3511ca587060f9f82bd5d7138c8a3ea9d012bffd685acff7375090c401ff28a298afb4d82234fe12c10542b9bbc99cad94
-
SSDEEP
6144:6dNafzK0YNeIbBsM/LD/DnEH52bCFDMWFM1Y7FYG/rHz/HxiZM:lQeiGUwH8WDMWF9FYc//ROM
Malware Config
Signatures
Files
-
bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e.exe windows x86
1ff00a7d00541dd9c5e2c09cc08e961e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LZOpenFileA
SetStdHandle
DeleteTimerQueueEx
PostQueuedCompletionStatus
MultiByteToWideChar
GetExitCodeProcess
ExitThread
GetFullPathNameA
SetInformationJobObject
VirtualAlloc
hid
HidP_GetScaledUsageValue
Sections
.rdata Size: 4KB - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs Size: - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ