Static task
static1
Behavioral task
behavioral1
Sample
bc776c6949ef6a4c35598c0f23de1af7b171f2124035d2ee07a5bba9cf52563f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc776c6949ef6a4c35598c0f23de1af7b171f2124035d2ee07a5bba9cf52563f.exe
Resource
win10v2004-20220812-en
General
-
Target
bc776c6949ef6a4c35598c0f23de1af7b171f2124035d2ee07a5bba9cf52563f
-
Size
651KB
-
MD5
997f5e8c8877b939488aa9b806ae398a
-
SHA1
867117213d0253f956817a5985b7276b744c4de7
-
SHA256
bc776c6949ef6a4c35598c0f23de1af7b171f2124035d2ee07a5bba9cf52563f
-
SHA512
f235b9fecb91c77d2e90a6d3925330c20383e568562e84d325a3b13210c3ef2e96cd435c79d8ca45eb88728399dfaa240796765722a8f172f4038c005daf0d09
-
SSDEEP
12288:rssIS/Xb5XClf+86rlY77sujaWX/uP5wqbExhyH7AOu4jgajpkKg:V/X+fum7gujWPbb57AwkNKg
Malware Config
Signatures
Files
-
bc776c6949ef6a4c35598c0f23de1af7b171f2124035d2ee07a5bba9cf52563f.exe windows x86
83d3f841c02aa180766b6fc44d1f13ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetFileType
GetTimeFormatW
ExpandEnvironmentStringsA
GetShortPathNameA
FreeLibrary
GetModuleHandleA
lstrcatA
GetLogicalDriveStringsA
SetUnhandledExceptionFilter
SetMailslotInfo
GetCurrentThread
GetLocalTime
ReadConsoleOutputCharacterW
GetProcAddress
EnumResourceNamesA
SetVolumeMountPointA
IsValidLocale
FindNextFileA
GetProcessHeap
GetUserDefaultLCID
GetSystemTime
GlobalGetAtomNameW
GetNumberOfConsoleInputEvents
GetVDMCurrentDirectories
EnumResourceNamesW
SetVolumeMountPointW
GetHandleInformation
VirtualAlloc
GetVersion
InterlockedExchange
LoadLibraryA
comctl32
ImageList_Destroy
_TrackMouseEvent
ImageList_LoadImageW
ord17
opengl32
glTexCoord3fv
glGetString
glClearStencil
glGetMapiv
glInterleavedArrays
glGetTexParameteriv
glIndexdv
wglCreateContext
wglDeleteContext
glColor3fv
wglMakeCurrent
glIsList
msvcrt
_mbsnextc
_mbsrev
_mbccpy
_yn
_mbschr
tolower
fseek
log
fread
sprintf
_iob
_getw
_safe_fdivr
_ismbcl2
fwrite
fputs
feof
fopen
_ismbstrail
_strupr
fsetpos
mktime
__threadid
_fmode
_mbspbrk
_heapmin
fclose
__lc_codepage
_mbctoupper
fputc
ftell
_heapwalk
_unlink
ferror
_CIsin
fwprintf
printf
memset
fprintf
Sections
.text Size: 628KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE