Static task
static1
Behavioral task
behavioral1
Sample
bce507c1a0271d0d0210c555e68ac7eaa1921063e228189a19a270d1faae4f4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bce507c1a0271d0d0210c555e68ac7eaa1921063e228189a19a270d1faae4f4b.exe
Resource
win10v2004-20220812-en
General
-
Target
bce507c1a0271d0d0210c555e68ac7eaa1921063e228189a19a270d1faae4f4b
-
Size
43KB
-
MD5
be30f1749b9d886edacd3c8f868d1a39
-
SHA1
a8a1532f33933d672503ef2a9c3b29a80e9eadab
-
SHA256
bce507c1a0271d0d0210c555e68ac7eaa1921063e228189a19a270d1faae4f4b
-
SHA512
3ec47996fddc647d8a908883ca591ecc49eb9a81fa7d8c384b274936169ab065dad091e524c27c0d586bd939eaaa1e03d8de44f30295a8a76fd307ffe9eecab5
-
SSDEEP
768:L27nZbvyZjMrLWvmcSiMyfGoqHlxM8yIYM9FqSzBs6xTvILjs:6nZbvye/W+0MRoqHlx0IYM9FqSxtvI/s
Malware Config
Signatures
Files
-
bce507c1a0271d0d0210c555e68ac7eaa1921063e228189a19a270d1faae4f4b.exe windows x86
fce7809a30096dee5d325be7178490ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rav Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE