Static task
static1
Behavioral task
behavioral1
Sample
bc91d34f0de1ff884a3868e0619ddeb9158b9e3b6ce3eebd98b198e67ee6588d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc91d34f0de1ff884a3868e0619ddeb9158b9e3b6ce3eebd98b198e67ee6588d.exe
Resource
win10v2004-20221111-en
General
-
Target
bc91d34f0de1ff884a3868e0619ddeb9158b9e3b6ce3eebd98b198e67ee6588d
-
Size
396KB
-
MD5
7991fadbcd87b10f22cb400958ecef8e
-
SHA1
5a39b942df17036462eab08496f8a8922f6f579a
-
SHA256
bc91d34f0de1ff884a3868e0619ddeb9158b9e3b6ce3eebd98b198e67ee6588d
-
SHA512
19e224ccc48d2c65d201e51cf8cc81eb84abf5d39ae7b52fd97488e684eae3e44ef4e58c631f4f5a98adbccc4518ac5fddecb9000df3a701cff8d4375039359d
-
SSDEEP
6144:s8wasRS68nsA/zk2y9GNbICHfNbp4B5i6el3JD370AtIVotDcvPNMZwzMqbtJa:FtsRTuR/zk2cK7/Nlwe3JD37TIVopC7W
Malware Config
Signatures
Files
-
bc91d34f0de1ff884a3868e0619ddeb9158b9e3b6ce3eebd98b198e67ee6588d.exe windows x86
847357df447681a1d8c3a7448bbd39ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetLastError
FlushFileBuffers
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
RaiseException
CreateFileA
CloseHandle
user32
wvsprintfA
wsprintfA
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ