Static task
static1
Behavioral task
behavioral1
Sample
bd2ce17cd4055bce27b6f2311c3f797d2dd9a79c2c77cc98c1de61f46a944642.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd2ce17cd4055bce27b6f2311c3f797d2dd9a79c2c77cc98c1de61f46a944642.exe
Resource
win10v2004-20220812-en
General
-
Target
bd2ce17cd4055bce27b6f2311c3f797d2dd9a79c2c77cc98c1de61f46a944642
-
Size
204KB
-
MD5
6cee562c7e98a8ffc7c986760083c6f8
-
SHA1
da67fb2c126a6c1f527bef55ec12c79f18b98d6d
-
SHA256
bd2ce17cd4055bce27b6f2311c3f797d2dd9a79c2c77cc98c1de61f46a944642
-
SHA512
89f1293b17584fb869cc3b4c460a7ff3035f9e8239d1f5fe7400ad85bbb20ebb73beac8ac0ddc137cca41fa049d193560b4349e1a67b9bc939d1cc625e86872b
-
SSDEEP
6144:W2taU0+UGvRy2naJbqzIaYBDhkfw0Afc:W2t7faYz8zkvAf
Malware Config
Signatures
Files
-
bd2ce17cd4055bce27b6f2311c3f797d2dd9a79c2c77cc98c1de61f46a944642.exe windows x86
e0ed5e6a91b8c15c8999a95c4a340e6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
rpcrt4
UuidCreate
kernel32
CreateFiberEx
LocalAlloc
TerminateJobObject
FileTimeToSystemTime
EnumResourceNamesW
FlushFileBuffers
GetTempPathW
SetEvent
RaiseException
iphlpapi
NotifyRouteChange
shlwapi
wnsprintfW
advapi32
EncryptFileW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
DecryptFileW
ole32
StringFromGUID2
CoDisconnectObject
CoResumeClassObjects
CLSIDFromString
CoAddRefServerProcess
CoRegisterMessageFilter
CreateClassMoniker
GetRunningObjectTable
CoTaskMemFree
CoUninitialize
CoReleaseServerProcess
CoRegisterClassObject
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoRevokeClassObject
CoTaskMemAlloc
user32
DispatchMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
RealGetWindowClass
TranslateMessage
PeekMessageW
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ