Static task
static1
Behavioral task
behavioral1
Sample
bc123b46b9894eca45042bc37606891edd1bf8968ec71885bc5cdc1863d4a796.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc123b46b9894eca45042bc37606891edd1bf8968ec71885bc5cdc1863d4a796.exe
Resource
win10v2004-20220812-en
General
-
Target
bc123b46b9894eca45042bc37606891edd1bf8968ec71885bc5cdc1863d4a796
-
Size
164KB
-
MD5
573b5467a7d3a9ab88ded074fdcaf9d3
-
SHA1
788e99a66a41cde62a1af4d7f76b5e1dbb6ee6fe
-
SHA256
bc123b46b9894eca45042bc37606891edd1bf8968ec71885bc5cdc1863d4a796
-
SHA512
b25cf073f8d86841118eb61376b6a1bc95337b497db19646a68aa457ec35c1160e02f22be5b93f793145a0355c053713758cf36646f85f150ef18380ddcd91ad
-
SSDEEP
3072:/ANz5K1Kn8+oeQxD7wd3z71R5bOz8PSqnp1qXgdAtmaGsxiS:u5pnMxD7wdv1XOzOR1h2maM
Malware Config
Signatures
Files
-
bc123b46b9894eca45042bc37606891edd1bf8968ec71885bc5cdc1863d4a796.exe windows x86
27804638702373966510cb43f777bb0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fubar Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE