Static task
static1
Behavioral task
behavioral1
Sample
bd1510fa01690e1e57ccff79014227f614b4970582a205770ec199f15b549bbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd1510fa01690e1e57ccff79014227f614b4970582a205770ec199f15b549bbf.exe
Resource
win10v2004-20220901-en
General
-
Target
bd1510fa01690e1e57ccff79014227f614b4970582a205770ec199f15b549bbf
-
Size
112KB
-
MD5
ca4114fba8822865c4168243cede15ac
-
SHA1
4a663f02d4ff51fe772dd6f568394a997d992aed
-
SHA256
bd1510fa01690e1e57ccff79014227f614b4970582a205770ec199f15b549bbf
-
SHA512
aeb3aa6c485e31fac2901a07bbfd0568735b5ffcf48792f4d0e252ba1c25fa7974ba420c05059f784c6df76ea37918aa92cecb09c1453cd9a910964f87d9e835
-
SSDEEP
1536:e9GjdDuPebIqCFC7NoQt4XQkbbszdBPAI0kYJGOmze9Kx6OG0LvoDB09:e9GJ+FC7NoQtXkbbqB4IxYoOmqQG0aC
Malware Config
Signatures
Files
-
bd1510fa01690e1e57ccff79014227f614b4970582a205770ec199f15b549bbf.exe windows x86
086bb72fad2b05789c21ea9115e5a9be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetModuleHandleA
GlobalAlloc
LockResource
CreateDirectoryA
GetLastError
SuspendThread
SetComputerNameW
CloseHandle
GetSystemTime
GetFileSize
lstrcpyA
VirtualProtect
VirtualAlloc
FindResourceA
CreateThread
lstrcpyW
SizeofResource
LoadResource
FindResourceExA
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
Sleep
GlobalFree
VirtualFree
FreeResource
HeapAlloc
GetOEMCP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetStringTypeW
user32
SetSysColors
GetDesktopWindow
IsWindowVisible
LoadBitmapA
MessageBoxA
gdi32
CreateBitmapIndirect
avifil32
AVIBuildFilterA
ws2_32
getservbyname
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 328KB - Virtual size: 755KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ibss Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE