Static task
static1
Behavioral task
behavioral1
Sample
bead3d31e6774954a196c9998d00dd8f8271a07bc17e4d4c7d915a53f58a367e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bead3d31e6774954a196c9998d00dd8f8271a07bc17e4d4c7d915a53f58a367e.exe
Resource
win10v2004-20221111-en
General
-
Target
bead3d31e6774954a196c9998d00dd8f8271a07bc17e4d4c7d915a53f58a367e
-
Size
67KB
-
MD5
0f6aa4c920ae839023f19ca399444393
-
SHA1
25619bf57ae6d05d6b6cd1b9618ba14973450225
-
SHA256
bead3d31e6774954a196c9998d00dd8f8271a07bc17e4d4c7d915a53f58a367e
-
SHA512
c9031ea586adbc9768cf951065585a431fbc959a0a4d5c89680d1114bbf45ef97e8cb42d5d141232bc537188ddf6a8322e56dbb0360c728c5baa39b12a795dab
-
SSDEEP
1536:cLidQCHRDHjYJ4zCP3twW6bARp1FPAdOwScdtOVmqKmVR1bH7:cLiiCHBj+4zCP3SW6Mn1FLAd0VmqbVRt
Malware Config
Signatures
Files
-
bead3d31e6774954a196c9998d00dd8f8271a07bc17e4d4c7d915a53f58a367e.exe windows x86
401cc1791adf9a4981ba941cd5e3c76f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetCurrentDirectoryA
GetACP
UnhandledExceptionFilter
WriteFile
FreeEnvironmentStringsW
OpenEventW
SetStdHandle
GetOEMCP
WideCharToMultiByte
SetConsoleCP
SetFilePointer
ExitProcess
InterlockedCompareExchange
GetCurrentProcessId
GetStringTypeW
GetModuleHandleA
VirtualProtect
CompareStringW
GetCurrentProcess
GetEnvironmentStringsW
GetStartupInfoA
VirtualFree
LocalAlloc
GetDateFormatA
FreeEnvironmentStringsA
HeapAlloc
TerminateProcess
GetSystemInfo
user32
SetFocus
ValidateRect
UpdateWindow
GetSystemMetrics
msvcrt
_onexit
wcschr
advapi32
RegCloseKey
RegQueryValueExW
GetTokenInformation
AllocateAndInitializeSid
ole32
CoCreateInstance
gdi32
GetTextMetricsW
SetBkMode
version
VerQueryValueW
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ