Static task
static1
Behavioral task
behavioral1
Sample
bdc74047e0f81820c5198bca10327d298330a3e3c0816c6b353010ccd066e979.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bdc74047e0f81820c5198bca10327d298330a3e3c0816c6b353010ccd066e979.exe
Resource
win10v2004-20221111-en
General
-
Target
bdc74047e0f81820c5198bca10327d298330a3e3c0816c6b353010ccd066e979
-
Size
170KB
-
MD5
9edc7f26cbff3cb964426aacccbfeeeb
-
SHA1
ab2c964b95fd9fcd0cd41229044a505d97d81e9e
-
SHA256
bdc74047e0f81820c5198bca10327d298330a3e3c0816c6b353010ccd066e979
-
SHA512
a44ba1f788aca63e79665f999945abf5124b06bfa84778d1ef1e091a86ea61baab6c785b228fbcd178c44fb8d9fad891e87c2930343ca844b1ff6b2253d4e979
-
SSDEEP
3072:dc5RKB6YwkLVhlipb9Xhx2lHbWlUwds7sNG/ki+GNL6voE50OLIS+wgBCqgn:dc5R26YhhlQhx25CRigS/6viOQd
Malware Config
Signatures
Files
-
bdc74047e0f81820c5198bca10327d298330a3e3c0816c6b353010ccd066e979.exe windows x86
3c4d19368059b32dc5c397e8a032864e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetFullPathNameA
GetCPInfo
LoadLibraryA
GetDiskFreeSpaceA
WriteFile
lstrcpyA
GetCurrentThreadId
EnterCriticalSection
AddAtomA
FindFirstFileA
FlushFileBuffers
GetThreadLocale
GetFileAttributesA
IsBadCodePtr
lstrcpynA
GetStringTypeW
CloseHandle
SetFilePointer
CreateFileA
LCMapStringW
GetStringTypeA
SetUnhandledExceptionFilter
lstrlenA
IsBadReadPtr
GetTickCount
ReadFile
Sleep
FreeEnvironmentStringsW
EnumResourceNamesW
GetEnvironmentStrings
LCMapStringA
LeaveCriticalSection
SetStdHandle
GetModuleHandleA
FreeLibrary
VirtualProtect
GetLastError
WideCharToMultiByte
DeleteCriticalSection
lstrlenW
GetOEMCP
UnhandledExceptionFilter
lstrcatA
GetStartupInfoA
MultiByteToWideChar
MulDiv
InitializeCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
GetEnvironmentStringsW
lstrcmpA
GetProcAddress
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 91KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ