Static task
static1
Behavioral task
behavioral1
Sample
bd339e533350ab7bf2a247cbde7bcb6c5e6d9e0f7d1e07c446b5ddee5fab3ee2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd339e533350ab7bf2a247cbde7bcb6c5e6d9e0f7d1e07c446b5ddee5fab3ee2.exe
Resource
win10v2004-20221111-en
General
-
Target
bd339e533350ab7bf2a247cbde7bcb6c5e6d9e0f7d1e07c446b5ddee5fab3ee2
-
Size
334KB
-
MD5
9e1dc1d0d50e7d2442cf0f944b87867a
-
SHA1
8b7a67e5033da871e2b2282404cb86cc25dd6d0b
-
SHA256
bd339e533350ab7bf2a247cbde7bcb6c5e6d9e0f7d1e07c446b5ddee5fab3ee2
-
SHA512
1e300be90ab26f78fe65fe9f8bb7ef60693869f57136ecdd2aa6cd89771a2b105da1fb4abfcea71e45b02fb414fd25b79c1290ce7c076de55c76f295fa878faf
-
SSDEEP
6144:mDrHEfWKiOZJurNSNxyRr/zx4F48I/sY0fvUZ30goB6PfSK:mDrHEfDYY3yRzzxx/SC66
Malware Config
Signatures
Files
-
bd339e533350ab7bf2a247cbde7bcb6c5e6d9e0f7d1e07c446b5ddee5fab3ee2.exe windows x86
3a22a93a5b9c24fc0d3e2dcc4c525de3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteEnhMetaFile
CreateEllipticRgn
ExtCreateRegion
CreateCompatibleBitmap
GetAspectRatioFilterEx
CreateSolidBrush
ExtEscape
ExtSelectClipRgn
CreateDCA
AddFontResourceW
Chord
EndDoc
DeleteDC
DescribePixelFormat
advapi32
RegUnLoadKeyA
RegOpenKeyExA
RegOpenKeyA
ReadEventLogA
ReportEventW
ClearEventLogW
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyExA
ReportEventA
shlwapi
SHDeleteValueA
ChrCmpIW
PathGetArgsW
StrCatW
StrRChrA
PathGetCharTypeA
StrCmpW
SHRegDeleteUSValueA
SHEnumKeyExA
SHDeleteEmptyKeyA
StrRChrIW
PathQuoteSpacesW
kernel32
GetModuleHandleA
VirtualAllocEx
FreeEnvironmentStringsA
GetProcAddress
GetPrivateProfileIntA
GetProfileIntA
WritePrivateProfileStringA
GetProfileSectionA
GetStartupInfoA
netapi32
NetErrorLogClear
NetAuditWrite
NetFileEnum
NetAuditClear
NetGroupAdd
NetErrorLogWrite
NetConfigGet
NetConfigSet
NetGetDCName
NetJoinDomain
NetFileGetInfo
NetConnectionEnum
NetAuditRead
NetGetJoinInformation
NetConfigGetAll
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
__getmainargs
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ