Static task
static1
Behavioral task
behavioral1
Sample
bc022a7bb948b317907b8d1a90f075573e242630e9673153a82c04abbbac4e72.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bc022a7bb948b317907b8d1a90f075573e242630e9673153a82c04abbbac4e72.exe
Resource
win10v2004-20220812-en
General
-
Target
bc022a7bb948b317907b8d1a90f075573e242630e9673153a82c04abbbac4e72
-
Size
53KB
-
MD5
4c2271bbf4a5602f313aeaee8c65055f
-
SHA1
32f8f3ec166fb8815e1370fd328465bc264a152a
-
SHA256
bc022a7bb948b317907b8d1a90f075573e242630e9673153a82c04abbbac4e72
-
SHA512
d564982386dd4d7d12a3307ccad6f159148ab6b313a1cddf597d79a9291bb42522fb4563c4f31730c802363d881662115fbe36e9155cbd5c167238699531c71f
-
SSDEEP
1536:FjTvjlo/5c1D8bsjYDQmFBlN3GZ7fD1W:FjTrluSeYsDFFBPIDk
Malware Config
Signatures
Files
-
bc022a7bb948b317907b8d1a90f075573e242630e9673153a82c04abbbac4e72.exe windows x86
cb19ef58cdde23ed1dbd37d7f1e9a337
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
WriteFile
ResetEvent
CreateDirectoryW
SystemTimeToFileTime
FlushFileBuffers
InitializeCriticalSection
ExpandEnvironmentStringsW
HeapAlloc
WaitForSingleObject
WideCharToMultiByte
lstrcpynW
FindClose
GetUserDefaultUILanguage
GetProcessHeap
FindResourceW
UnmapViewOfFile
MultiByteToWideChar
CreateProcessW
GetTempPathW
lstrcmpiW
CreateEventW
GetExitCodeProcess
GetCommandLineA
GlobalLock
MoveFileExW
CopyFileW
DeleteFileW
GetProcessTimes
GetThreadPriority
SetEvent
SetEndOfFile
GetTempFileNameW
lstrlenA
SetLastError
GetCurrentThreadId
FindFirstFileW
GetSystemTime
WriteProcessMemory
lstrcatW
GetFileTime
SetFileAttributesW
GetFileSizeEx
lstrcatA
SetFileTime
SetFilePointer
GetVersionExW
CloseHandle
lstrlenW
GetComputerNameW
CreateFileMappingW
GetLastError
MapViewOfFile
GetModuleFileNameW
EnterCriticalSection
HeapFree
CreateFileW
GetFileSize
Sleep
FindNextFileW
user32
GetDlgItemTextA
Sections
.cpmf Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jop Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mvez Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dup Size: 25KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ