antiemu33
Static task
static1
Behavioral task
behavioral1
Sample
bc117a11521f73f51187637c177eb11d5ea8bff6dbddbd58158676d4fa2248e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc117a11521f73f51187637c177eb11d5ea8bff6dbddbd58158676d4fa2248e8.exe
Resource
win10v2004-20221111-en
General
-
Target
bc117a11521f73f51187637c177eb11d5ea8bff6dbddbd58158676d4fa2248e8
-
Size
810KB
-
MD5
06a161ad594b4c33f9cb285c6e0c25b7
-
SHA1
c7e147ecbee172e7606cdd76aa85dfa68a63ae76
-
SHA256
bc117a11521f73f51187637c177eb11d5ea8bff6dbddbd58158676d4fa2248e8
-
SHA512
f756f850e2ae4f0a97c0475cb3791492c3a7f6a39f79edc6a08ef486c372fab155302527194440d5c6a6cea24e7b84830065116f80478c9e30edf5e74c47340c
-
SSDEEP
24576:DCF4BzFnm9wR8b0G6nBTKx6BBSlyCCKGAzyZBV5:JFC0G89P324NZZB
Malware Config
Signatures
Files
-
bc117a11521f73f51187637c177eb11d5ea8bff6dbddbd58158676d4fa2248e8.exe windows x86
a18aa397e7bd29d6beaf9a8cce1a53a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess
shell32
SHBrowseForFolderA
ole32
CoInitialize
netapi32
NetApiBufferAllocate
wldap32
ord95
Exports
Exports
Sections
.text Size: 799KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.beex Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 857B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.seck Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.seck2 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ