Static task
static1
Behavioral task
behavioral1
Sample
bc4c7dcd5d14f9cddb22d076da8717510a2cf4cb83542f7c682d6ba629efdcd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc4c7dcd5d14f9cddb22d076da8717510a2cf4cb83542f7c682d6ba629efdcd8.exe
Resource
win10v2004-20221111-en
General
-
Target
bc4c7dcd5d14f9cddb22d076da8717510a2cf4cb83542f7c682d6ba629efdcd8
-
Size
206KB
-
MD5
90893dd2ee179664c07be2f9ef89c3c5
-
SHA1
7d8a4a2c6d8f66a9834c8ffed7a304fb511fdefa
-
SHA256
bc4c7dcd5d14f9cddb22d076da8717510a2cf4cb83542f7c682d6ba629efdcd8
-
SHA512
d0140b73f9907f74d925af7d2edf7aac0949b8bcad4f3e5b30bf507bdb712069fa0eb731d0409bc1d27a560b10ef2eb17b8bc276a96cd67b528ebdedd990a239
-
SSDEEP
6144:hu6ABIdHMnMMYGlPtFYmeiGLaMt8ApYUBvNdP4y2:huLIHMhPtFvei8aM2Aa8N+y2
Malware Config
Signatures
Files
-
bc4c7dcd5d14f9cddb22d076da8717510a2cf4cb83542f7c682d6ba629efdcd8.exe windows x86
4de9a64c7b78c158a506f9a22164c6d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventA
SetLastError
GetModuleFileNameW
GetExitCodeProcess
FreeResource
CreateFileA
GetVersionExA
ReadFile
GetTimeFormatW
CreateNamedPipeW
FindResourceW
GetSystemDirectoryW
GetVolumeInformationA
lstrcmpiW
GetLogicalDriveStringsA
CopyFileExA
EnumDateFormatsA
GetModuleHandleA
BeginUpdateResourceW
Sleep
GetSystemDefaultLangID
SetErrorMode
GetOEMCP
IsBadCodePtr
GetTempFileNameW
GetProcessHeap
QueryPerformanceFrequency
ExitThread
GetFileAttributesW
FatalAppExitW
GetSystemInfo
OpenSemaphoreW
lstrcmp
QueryPerformanceCounter
GetStringTypeA
GetLongPathNameW
InitializeCriticalSection
GetNumberFormatW
GetDiskFreeSpaceA
TlsAlloc
CreateDirectoryA
CompareFileTime
GetVersion
FatalAppExitA
IsBadWritePtr
GetProcAddress
user32
TrackPopupMenuEx
RegisterWindowMessageW
DialogBoxParamW
ShowCaret
IsDlgButtonChecked
SetWindowTextA
IsIconic
DialogBoxIndirectParamW
InsertMenuW
LoadCursorW
GetMessageA
CreateAcceleratorTableA
LoadImageA
CreateMenu
GetMenuStringW
GetMenuItemInfoW
UpdateLayeredWindow
PostQuitMessage
GetClassInfoExW
CopyRect
InvalidateRect
EnumChildWindows
mouse_event
UpdateWindow
keybd_event
GetTopWindow
MonitorFromRect
ChildWindowFromPoint
GetActiveWindow
GetForegroundWindow
CharUpperA
GetKeyboardLayout
GetWindowTextW
BringWindowToTop
CharNextW
EnumClipboardFormats
EmptyClipboard
GetDlgItem
GetClassInfoA
TrackPopupMenu
GetSystemMetrics
GetCursorPos
GetClassInfoW
CallWindowProcW
AdjustWindowRect
EndDialog
gdi32
ExtTextOutA
PlayMetaFile
CreateHatchBrush
OffsetViewportOrgEx
FillPath
GetClipBox
GetRgnBox
CreateDCA
FloodFill
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueW
ole32
BindMoniker
CoGetCurrentProcess
OleUninitialize
IsValidIid
CoDeactivateObject
OleCreate
wininet
FtpPutFileW
FtpCreateDirectoryA
InternetSetCookieExW
InternetGetCookieExA
ForceNexusLookup
GopherGetAttributeA
SetUrlCacheEntryGroup
InternetSetDialStateW
HttpSendRequestExW
CreateUrlCacheContainerA
InternetGetConnectedStateEx
InternetConnectA
FindFirstUrlCacheEntryA
UnlockUrlCacheEntryFileA
CreateUrlCacheContainerW
winmm
NotifyCallbackData
midiOutClose
mmioWrite
midiOutCacheDrumPatches
waveOutRestart
waveOutGetID
waveOutSetPlaybackRate
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.NkRgVz Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iggwRn Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VcFX Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fEO Size: 512B - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vLt Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cJGHT Size: 2KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XUTdU Size: 512B - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ