Static task
static1
Behavioral task
behavioral1
Sample
bdb6913d9e2a7879c08ad3732b1c7711bd5b10ceb4a9beaee0b76558e6ca1921.exe
Resource
win7-20220812-en
General
-
Target
bdb6913d9e2a7879c08ad3732b1c7711bd5b10ceb4a9beaee0b76558e6ca1921
-
Size
199KB
-
MD5
e20eb47f7d6541423433db919f947c33
-
SHA1
1671ad1ceaef663a09cbd3992900cb9bb65a8b89
-
SHA256
bdb6913d9e2a7879c08ad3732b1c7711bd5b10ceb4a9beaee0b76558e6ca1921
-
SHA512
dd35e1f4e60e3bee3b3476a65529ca9ee307e0546ff01d755b3890c190a38fedbccb999ff41edf6b37da6f68d15a8ffa4c1ea53491fd32e65c5fedcdc563a4c9
-
SSDEEP
6144:usCyADRvUT1gW7SAQhBHpWCsZgN7yV87ozSv:uQADRUV7QPHpEgN7q8KS
Malware Config
Signatures
Files
-
bdb6913d9e2a7879c08ad3732b1c7711bd5b10ceb4a9beaee0b76558e6ca1921.exe windows x86
cfb5f8ac579a3690545131247f9223a5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
TlsGetValue
LCMapStringW
GetLocaleInfoA
LCMapStringA
WriteConsoleW
OutputDebugStringW
EnumSystemLanguageGroupsW
GetStringTypeW
GetStringTypeA
HeapReAlloc
DebugBreak
CompareFileTime
GetTimeZoneInformation
OutputDebugStringA
GetCPInfo
oleacc
DllGetClassObject
CreateStdAccessibleObject
advapi32
GetUserNameA
DuplicateTokenEx
InitializeSecurityDescriptor
IsValidSecurityDescriptor
PrivilegeCheck
GetSecurityDescriptorLength
SetSecurityDescriptorOwner
LookupAccountSidA
AddAce
QueryServiceStatus
RegOpenKeyExW
shell32
SHChangeNotify
SHGetPathFromIDListW
oledlg
OleUIBusyW
winmm
sndPlaySoundA
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ