Static task
static1
Behavioral task
behavioral1
Sample
bc67560f9cb2df23bc5af70361d347a72eb85493d1944f921855f28a9572d0ee.exe
Resource
win7-20220812-en
General
-
Target
bc67560f9cb2df23bc5af70361d347a72eb85493d1944f921855f28a9572d0ee
-
Size
120KB
-
MD5
1ff8c6b3f104991d9d1ae2540ce29b60
-
SHA1
e31d8491dd0ab19ffaa225a9ffe53e195c1c20bb
-
SHA256
bc67560f9cb2df23bc5af70361d347a72eb85493d1944f921855f28a9572d0ee
-
SHA512
f6b8edf4e3e3e46aeba80f4ef01fcd24a3d11a41723263ec657888d0cf0cdc9755df0daf0fa9a13508a8e8a06dbeb75bed1337430e986733ff88b8d56a1a179a
-
SSDEEP
3072:YDqoFBPXIitq1mPQrQ4puOZ5kQPJbO07CSutcaNO:IPYCuJ8OPhJbO07CSutu
Malware Config
Signatures
Files
-
bc67560f9cb2df23bc5af70361d347a72eb85493d1944f921855f28a9572d0ee.exe windows x86
874948018dcda048967c667ac828b3da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
SetEnvironmentVariableA
GetPrivateProfileSectionA
GetLongPathNameA
GetDiskFreeSpaceW
ExitProcess
WriteFileEx
GetCurrentDirectoryA
WaitForSingleObject
GetPrivateProfileIntA
FindResourceW
InterlockedDecrement
GetACP
GetDiskFreeSpaceW
GetPrivateProfileIntA
GetExitCodeProcess
VirtualAllocEx
LoadLibraryA
GetModuleHandleW
lstrcpyW
Heap32First
GetStringTypeW
lstrcmpA
apphelp
ApphelpCheckIME
AllowPermLayer
SdbCreateMsiTransformFile
ApphelpCheckExe
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE