Static task
static1
Behavioral task
behavioral1
Sample
bd0ca2169ee19d23619622902dfec4c4c8fc1caa498f7cb660cfb1a96ea1c266.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd0ca2169ee19d23619622902dfec4c4c8fc1caa498f7cb660cfb1a96ea1c266.exe
Resource
win10v2004-20220812-en
General
-
Target
bd0ca2169ee19d23619622902dfec4c4c8fc1caa498f7cb660cfb1a96ea1c266
-
Size
3.9MB
-
MD5
e7bffc75daf4a6093b1ea7a75f31f004
-
SHA1
11be0d489dd6aaeec50aac217797059edf3ede3e
-
SHA256
bd0ca2169ee19d23619622902dfec4c4c8fc1caa498f7cb660cfb1a96ea1c266
-
SHA512
5561447be882bd9ca6cda452d2da0a63c7162c2370110314ad53da9fc8136673c868b606fffb88d639aae303697ccfa4d20761c55bf4dccfe9c02d624cbc2ffa
-
SSDEEP
98304:h+YBVAg0cVsLnu5kgLKvzVnTsGZzogQJC0krspo:h+YBWgpCLnf/ZzAJXkrs+
Malware Config
Signatures
Files
-
bd0ca2169ee19d23619622902dfec4c4c8fc1caa498f7cb660cfb1a96ea1c266.exe windows x86
c09ff627d75a232ff5491f150905fc8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardLayout
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
StrChrIA
StrStrA
kernel32
lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
urlmon
CoInternetCompareUrl
comctl32
GetMUILanguage
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE