Static task
static1
Behavioral task
behavioral1
Sample
bcd37c46e2e4630c981dd215db7fbcd95d817635eb670333a0cb24082d73b6da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bcd37c46e2e4630c981dd215db7fbcd95d817635eb670333a0cb24082d73b6da.exe
Resource
win10v2004-20220812-en
General
-
Target
bcd37c46e2e4630c981dd215db7fbcd95d817635eb670333a0cb24082d73b6da
-
Size
465KB
-
MD5
8e86b02701e0f820523fc7574ab1e11b
-
SHA1
c3ae4f94ddb848a312a787967fb4a98d3208b311
-
SHA256
bcd37c46e2e4630c981dd215db7fbcd95d817635eb670333a0cb24082d73b6da
-
SHA512
06e80e4f0711d42e8ada80500208229e493ac72d9ce0b998b2acec6e5c56fb575ddbe8b2d89df3f3e0cf2ebdf38f839d6dd91ea634b1a9b10a67fd35da8093ac
-
SSDEEP
3072:BnAyecySa/Sg1H0Q7Cghr54m5nLocvWyW4Vv0fCp8XJVlioN196U2:1Ajcm1v7rZ549vyW4Vv0fCmMsP6U
Malware Config
Signatures
Files
-
bcd37c46e2e4630c981dd215db7fbcd95d817635eb670333a0cb24082d73b6da.exe windows x86
6208c11cc1b2476dd0f23b37e3081ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
MultiByteToWideChar
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
GetModuleFileNameA
GetLastError
CreateThread
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryA
GetProcAddress
GetModuleHandleA
FormatMessageA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetFileAttributesA
GetTempPathA
GetVersionExA
CopyFileA
GlobalMemoryStatus
GetTimeFormatA
GetDateFormatA
GetSystemDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
ExitProcess
DeleteFileA
lstrcmpiA
OpenProcess
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
GetCurrentProcess
TerminateProcess
GetLocaleInfoA
TerminateThread
CreateEventA
ReadFile
InterlockedExchange
HeapSize
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
VirtualQuery
SetEndOfFile
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
WideCharToMultiByte
LCMapStringA
SetFilePointer
GetFileType
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
ws2_32
getsockname
WSASocketA
getsockopt
setsockopt
ioctlsocket
bind
listen
accept
WSAStartup
WSACleanup
inet_addr
htons
connect
recv
closesocket
socket
send
select
__WSAFDIsSet
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
mpr
WNetAddConnection2A
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 333KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE