Static task
static1
Behavioral task
behavioral1
Sample
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe
Resource
win10v2004-20220812-en
General
-
Target
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271
-
Size
38KB
-
MD5
5c0d1cc5a7033e98a7993f2c80b12d09
-
SHA1
defcc91dbcb74856873e725494c1f64b538fa4ac
-
SHA256
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271
-
SHA512
f87adfc26883bc420e041527d18f0129433ad2aa1648e76b5e4b1deb60c28f70da9135d4ce1e40dfa312e51aab0a98ef0c5dceeaa64251b2490234b2b211a42d
-
SSDEEP
768:88L8LPJ868R878C888Q8E8m8E8d7/LNDyYgxJHlyf5RPEsw3EbHpsva5wRwUV5n:8bTJzqIfhbp1pG7/LpgxJFO5v8qqRwy9
Malware Config
Signatures
Files
-
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe windows x86
2117b772398160f63265d332d71afd78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
strlen
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
WaitForMultipleObjects
CloseHandle
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zaer Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ