Static task
static1
Behavioral task
behavioral1
Sample
bc8d92edb3f24a9b7a1b000237d7c02869d8df0c14099a364fd0388b5cd9f70c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc8d92edb3f24a9b7a1b000237d7c02869d8df0c14099a364fd0388b5cd9f70c.exe
Resource
win10v2004-20220812-en
General
-
Target
bc8d92edb3f24a9b7a1b000237d7c02869d8df0c14099a364fd0388b5cd9f70c
-
Size
208KB
-
MD5
700f6c437135795d8a116fdec90a0849
-
SHA1
9a3891e678b822f2a1ef0ec73f5ccdf545dff18b
-
SHA256
bc8d92edb3f24a9b7a1b000237d7c02869d8df0c14099a364fd0388b5cd9f70c
-
SHA512
9a06b70b9bf8217625ae2b5e455ef13dec15fb2c7c9524367a779b916fbad2e7f8cddc4165bede8ea3e0ff01a196bd93b1371ec73f2188ad0325aa1e0a607fc8
-
SSDEEP
3072:fwBDKvSaKDMpoTJjoeKj1J1NSi8XnMn0co/L:fwBwSaoCoTJjoeKjHSi8XnMn6
Malware Config
Signatures
Files
-
bc8d92edb3f24a9b7a1b000237d7c02869d8df0c14099a364fd0388b5cd9f70c.exe windows x86
2e161215caaadb6100fac5009042cc88
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
RaiseException
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetStringTypeA
HeapValidate
IsBadReadPtr
IsBadWritePtr
SetConsoleCtrlHandler
GetLastError
RtlUnwind
VirtualFree
HeapFree
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers
GetCPInfo
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
CloseHandle
user32
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
SetTimer
BeginPaint
GetClientRect
EndPaint
InvalidateRect
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
wsprintfA
DrawTextA
gdi32
CreateSolidBrush
SelectObject
Ellipse
CreatePen
MoveToEx
LineTo
DeleteObject
GetStockObject
Sections
.text Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ