Static task
static1
Behavioral task
behavioral1
Sample
bc0e6c7a9bc3cb4b3f9f1b92341fdba51810801c1d9296c82170058fde59c7c9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc0e6c7a9bc3cb4b3f9f1b92341fdba51810801c1d9296c82170058fde59c7c9.exe
Resource
win10v2004-20221111-en
General
-
Target
bc0e6c7a9bc3cb4b3f9f1b92341fdba51810801c1d9296c82170058fde59c7c9
-
Size
71KB
-
MD5
f9d250b66e2616da7397d81c2b746745
-
SHA1
41ac54a5899510cf8d0474345601202736e8cba7
-
SHA256
bc0e6c7a9bc3cb4b3f9f1b92341fdba51810801c1d9296c82170058fde59c7c9
-
SHA512
7d0ecef024790706cf75448390e6824d21468547077269b2e5f123e13279e8770aca7e1929962960c9b1f1efb58289c77143abaa23c3947f1a84ea10044192c5
-
SSDEEP
1536:6oFi1TE5A2tNBwSo8RhbH0f1zwQVgvvRG:RFiy5AsDhg1zwLvvRG
Malware Config
Signatures
Files
-
bc0e6c7a9bc3cb4b3f9f1b92341fdba51810801c1d9296c82170058fde59c7c9.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE