Static task
static1
Behavioral task
behavioral1
Sample
bca0fa96da8019a1db11dad93ae63d37f366f8f89a98ffb6d50b4290a1eb421e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bca0fa96da8019a1db11dad93ae63d37f366f8f89a98ffb6d50b4290a1eb421e.exe
Resource
win10v2004-20220812-en
General
-
Target
bca0fa96da8019a1db11dad93ae63d37f366f8f89a98ffb6d50b4290a1eb421e
-
Size
266KB
-
MD5
91ed290bd993c4cc58bf35cee153fa02
-
SHA1
7f9bc4c2043e174eb6643936543dadd70357942d
-
SHA256
bca0fa96da8019a1db11dad93ae63d37f366f8f89a98ffb6d50b4290a1eb421e
-
SHA512
541bc7faf46f82ccb545e6168c9fcc77faf54c027789bc46cf74527c5c9ef3d41af06a1c5876c459a545062553eec1ebdd3401d784b8430d5437249bf677c88d
-
SSDEEP
3072:uUHKRpiYkxxaI19rZn9kTtYtwX7JLaZXP8Ex5faZvKa5oyFgwK5G1buEt6hns3xQ:7HKDEr/Fn2TmOJLaZXlaRJ5Baw9buNGu
Malware Config
Signatures
Files
-
bca0fa96da8019a1db11dad93ae63d37f366f8f89a98ffb6d50b4290a1eb421e.exe windows x86
bfb230bdf60d9d9eb821c1b58eeea200
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleA
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent
LocalFree
CloseHandle
QueryPerformanceCounter
GetCurrentDirectoryA
LocalAlloc
ExitProcess
LoadLibraryA
GetTapeStatus
GetProcAddress
GetTickCount
GetCurrentProcess
TlsFree
TlsSetValue
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
user32
RegisterClassA
EndPaint
GetMessageA
SetTimer
PostQuitMessage
FillRect
GetLastActivePopup
TrackMouseEvent
LoadIconA
GetClientRect
SendMessageA
BeginPaint
GetIconInfo
GetDC
TranslateMessage
ChildWindowFromPoint
MessageBoxA
GetAncestor
CreateWindowExA
ReleaseDC
GetDlgItem
GetDesktopWindow
WindowFromDC
CreateCaret
DispatchMessageA
MessageBoxW
LoadImageA
CloseWindow
LoadCursorA
gdi32
DeleteEnhMetaFile
DeleteDC
CreateFontA
StretchBlt
GetCurrentObject
GetDCBrushColor
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
FillRgn
GetObjectA
GetStockObject
CloseEnhMetaFile
CreateSolidBrush
GetBrushOrgEx
BitBlt
comdlg32
ChooseFontA
PrintDlgA
advapi32
OpenProcessToken
LookupPrivilegeValueA
PrivilegeCheck
userenv
GetProfileType
comctl32
InitCommonControlsEx
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ