Static task
static1
Behavioral task
behavioral1
Sample
bd63439fa1173cb0614ba7cff68cb42456a142480eeb7d8b95821139b723570f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd63439fa1173cb0614ba7cff68cb42456a142480eeb7d8b95821139b723570f.exe
Resource
win10v2004-20221111-en
General
-
Target
bd63439fa1173cb0614ba7cff68cb42456a142480eeb7d8b95821139b723570f
-
Size
306KB
-
MD5
8edce7dfbaaa63a3515f85c7ef145228
-
SHA1
fcce794ddef78bda7a49cd3e1a5c4d3e012605e4
-
SHA256
bd63439fa1173cb0614ba7cff68cb42456a142480eeb7d8b95821139b723570f
-
SHA512
d320718529aa7489420fdd3596463626a75735f94c66802c7613a101e34c0929c5eb5f419b79ae531b4f040477ddd6c8c7172d789f2b213c2e2c0e25a3af4b77
-
SSDEEP
6144:jAPyCz2IQ5DdWyz5wHkFB99hth2uyuWVrfOMrw:MyCz2IgDwwws9BhJw7TU
Malware Config
Signatures
Files
-
bd63439fa1173cb0614ba7cff68cb42456a142480eeb7d8b95821139b723570f.exe windows x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 122KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8c.2yxo4 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b49u3stb Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rddsb7fh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.prsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE