Static task
static1
Behavioral task
behavioral1
Sample
bc48d47d4467cb84c6ec1973b47d1b88f5345588adc5c27ee80fba9f355ef6a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc48d47d4467cb84c6ec1973b47d1b88f5345588adc5c27ee80fba9f355ef6a9.exe
Resource
win10v2004-20220812-en
General
-
Target
bc48d47d4467cb84c6ec1973b47d1b88f5345588adc5c27ee80fba9f355ef6a9
-
Size
145KB
-
MD5
d96944b20ddc74c390e7f45e8117ea4d
-
SHA1
cb558222adec3263fc47a00adfa5a253fc826bb7
-
SHA256
bc48d47d4467cb84c6ec1973b47d1b88f5345588adc5c27ee80fba9f355ef6a9
-
SHA512
c19e0fa169763540712be01aa54a5736ceb08311ebae91396c8c388ccbf768a156239b58af0ffb0bd0efe2eff6d09abbb1df39653e0aa0d81a81982006566815
-
SSDEEP
3072:5Ky8Jw46ZZ272BQs5KwBoekARnPw8I7Ge6qxYX6:ohw4qW4QsBoVAxmPvYq
Malware Config
Signatures
Files
-
bc48d47d4467cb84c6ec1973b47d1b88f5345588adc5c27ee80fba9f355ef6a9.exe windows x86
879c0ec3141913c0932920f13f2073b0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptAcquireContextW
GetUserNameW
RegEnumKeyExA
RegSetValueExA
shlwapi
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
user32
DispatchMessageA
DrawIcon
ExitWindowsEx
GetCursorPos
GetMenuItemID
LoadCursorA
MsgWaitForMultipleObjects
PeekMessageA
SetThreadDesktop
ToUnicode
Sections
.vujuz Size: 46KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.urmz Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pglmn Size: 6KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ