Static task
static1
Behavioral task
behavioral1
Sample
bc9f8369f8af845b5f776fbbae08716a28bc3bfca794307d23f5d6e1c916a256.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc9f8369f8af845b5f776fbbae08716a28bc3bfca794307d23f5d6e1c916a256.exe
Resource
win10v2004-20220812-en
General
-
Target
bc9f8369f8af845b5f776fbbae08716a28bc3bfca794307d23f5d6e1c916a256
-
Size
68KB
-
MD5
04f95cca645fcef7b4533f9c5c905216
-
SHA1
72a5fdd1b7a8e676084177ebc81627ad0b950a88
-
SHA256
bc9f8369f8af845b5f776fbbae08716a28bc3bfca794307d23f5d6e1c916a256
-
SHA512
9accc8aa071427a2b50b78ced977ecdf7a4a3d990f56bd6defab96dddcf48be1ec559eafc5e25f0c6ff737c484dc632b90d3b72c11ff0f181a67fa9b6184e8c0
-
SSDEEP
1536:TB+rXPrZLaubCl5gwqD4N7urtnqjdSZkSGODAeFJw9:orXT5auQ5JqDKiqB2k2seW
Malware Config
Signatures
Files
-
bc9f8369f8af845b5f776fbbae08716a28bc3bfca794307d23f5d6e1c916a256.exe windows x86
82f00970db3b748aa700def2fb80e101
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetStringTypeA
HeapAlloc
lstrcpyA
GetLastError
GetConsoleOutputCP
GetCurrentProcess
GetOEMCP
GetModuleFileNameA
DeleteFileA
GetFileSize
ExitProcess
GetCurrentThread
GetLocalTime
GetFileType
GlobalAlloc
GetCurrentProcessId
Sleep
lstrcmpA
GetCurrentThreadId
lstrcpynA
GetConsoleOutputCP
lstrcpynA
GetConsoleOutputCP
GetCurrentProcess
GetConsoleOutputCP
GetCurrentThreadId
GetConsoleOutputCP
FreeLibrary
GetConsoleOutputCP
GetCurrentThread
GetConsoleOutputCP
GetFileAttributesA
GetConsoleOutputCP
lstrcpyA
GetConsoleOutputCP
GlobalAlloc
user32
CopyRect
AppendMenuA
DialogBoxParamW
DrawIconEx
GetWindowTextA
DrawTextW
CalcMenuBar
LoadCursorA
GetDC
CopyIcon
GetCursor
GetDlgItem
BlockInput
DrawTextA
DialogBoxParamA
IsWindow
GetFocus
AppendMenuW
CloseWindow
DrawIconEx
GetFocus
IsMenu
CopyImage
GetMenu
CalcMenuBar
LoadCursorA
AlignRects
CreateIcon
AppendMenuA
AppendMenuW
DrawIcon
EndDialog
DrawTextW
CloseWindow
DialogBoxParamW
GetWindowTextA
Sections
.tdxt Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddta Size: 512B - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ