Static task
static1
Behavioral task
behavioral1
Sample
bd42b3daab5abf214cac0367371360bbe683c44f95c1f6e2ade1425c127af673.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd42b3daab5abf214cac0367371360bbe683c44f95c1f6e2ade1425c127af673.exe
Resource
win10v2004-20221111-en
General
-
Target
bd42b3daab5abf214cac0367371360bbe683c44f95c1f6e2ade1425c127af673
-
Size
328KB
-
MD5
655fd9af37b3d549017b110b45317847
-
SHA1
b0eb2d6f4f495faf5c973ed856edae5eeb224c33
-
SHA256
bd42b3daab5abf214cac0367371360bbe683c44f95c1f6e2ade1425c127af673
-
SHA512
93f283f87940cab9faa5b77a0bafd91d0bb3dd741ec3942962efe489eb121006fa277fc3714023f1a4fd430931489e723e595c69085afa2825509b360af2e761
-
SSDEEP
6144:sf/fkFZIHo7uriI3NrzVh0CtD2IWEzDsFHg5nOkDZPLi:sf/fkfIHoGrjPtD28sSnxl
Malware Config
Signatures
Files
-
bd42b3daab5abf214cac0367371360bbe683c44f95c1f6e2ade1425c127af673.exe windows x86
dd949a20dfbc855a54c567751df04e99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
WriteConsoleW
Sleep
VirtualAlloc
FindResourceA
GetVersionExA
DeleteFileW
GetSystemTimeAsFileTime
HeapAlloc
HeapDestroy
SetUnhandledExceptionFilter
ReadFile
GetCurrentProcessId
LCMapStringA
HeapFree
TlsGetValue
TlsFree
ExitProcess
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_strcmpi
Sections
guweisq Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ