Static task
static1
Behavioral task
behavioral1
Sample
bdd80247278272f4a74e5d843651c4996b631381313210bfca10f8318aa8a99b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdd80247278272f4a74e5d843651c4996b631381313210bfca10f8318aa8a99b.exe
Resource
win10v2004-20221111-en
General
-
Target
bdd80247278272f4a74e5d843651c4996b631381313210bfca10f8318aa8a99b
-
Size
360KB
-
MD5
0c9ac453c74018457a0ab2b1566bd7a9
-
SHA1
1c1da2da2e1eb45aac6150e6ae1ce880398c78ec
-
SHA256
bdd80247278272f4a74e5d843651c4996b631381313210bfca10f8318aa8a99b
-
SHA512
00f2b0b141051642a518538353fd42ff1602e9f892ccf1de6d685d4617580df35708b83457ee49f9605d4d1b7e21c0b58032b60f3c88f2bc023a4e76b0356f3d
-
SSDEEP
6144:DCjMdOLd2izH11RAIlnG7CLES3XGOSm86svhr7FHO6InPMzqV:ejMqd2AV1RAIlnrX7/09Fu6IKq
Malware Config
Signatures
Files
-
bdd80247278272f4a74e5d843651c4996b631381313210bfca10f8318aa8a99b.exe windows x86
6d9c4aaf30723327c197fd38883e7cfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
SetLastError
GetLastError
VirtualProtect
DeleteCriticalSection
GetModuleHandleA
GetCommandLineA
CreateSemaphoreA
ReleaseMutex
SearchPathA
TlsGetValue
FreeConsole
Sleep
GetTickCount
GetModuleFileNameA
FindClose
CreateMutexA
CloseHandle
GetComputerNameA
GetDriveTypeA
shell32
SHGetNewLinkInfo
ShellAboutA
SheChangeDirA
DragFinish
ShellMessageBoxA
SHFree
SHGetSettings
SHAlloc
SheGetDirA
DragAcceptFiles
DragQueryFileA
DragQueryPoint
SHGetDiskFreeSpaceA
SHGetMalloc
loghours
LogonScheduleDialog
DialinHoursDialogEx
DirSyncScheduleDialogEx
DialinHoursDialog
ReplicationScheduleDialog
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ