Static task
static1
Behavioral task
behavioral1
Sample
bc7b356e6b9608051b7cf76ddc22b377.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc7b356e6b9608051b7cf76ddc22b377.exe
Resource
win10v2004-20240226-en
General
-
Target
bc7b356e6b9608051b7cf76ddc22b377
-
Size
580KB
-
MD5
bc7b356e6b9608051b7cf76ddc22b377
-
SHA1
cbda303fe2bcd1349e20aa9ccafe773cbfb2b4a3
-
SHA256
919dc53469eac9dfbb4ac7a2a4b03e579f1c7506ec14559b18ffc8362d3f9fcc
-
SHA512
69c41fb36c0364774ff22e71c753608886f7b09d288cb570581c26a67b54dd2805c79272097d2f9d0ed0f5bc5f8d69b0e90578f020f3ec497f9ca6b12813e911
-
SSDEEP
6144:O6i560Rd+qcW7uBXR39Ussu05e/3esnZ7pTyDlLb36SGpnoZP2UC0rqb6iBEq:h0Hd7uBH5v/3esnZ7uL65ny6b6iK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc7b356e6b9608051b7cf76ddc22b377
Files
-
bc7b356e6b9608051b7cf76ddc22b377.exe windows:4 windows x86 arch:x86
6e7254ca5245d32dabf37625a5f7dd67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
TerminateProcess
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetStartupInfoA
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetACP
WritePrivateProfileStringA
CloseHandle
lstrlenA
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GlobalAlloc
lstrcmpA
GetCurrentThread
GetFileTime
GetFileSize
GetFileAttributesA
GetModuleFileNameA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
GlobalLock
GlobalUnlock
SetFilePointer
FlushFileBuffers
LockResource
GlobalFree
CreateFileA
WriteFile
ReadFile
GetLastError
GetCurrentProcess
DuplicateHandle
MulDiv
LocalFree
WideCharToMultiByte
SetLastError
MultiByteToWideChar
HeapCreate
InterlockedDecrement
InterlockedIncrement
Sleep
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
VirtualFree
SetUnhandledExceptionFilter
GetFileType
HeapDestroy
FindResourceA
InitializeCriticalSection
CreateThread
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
GetProfileStringA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadResource
user32
GrayStringA
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfA
ClientToScreen
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
ShowWindow
EnableMenuItem
WindowFromPoint
CharUpperA
PostQuitMessage
SetCursor
ValidateRect
TranslateMessage
GetMessageA
InflateRect
LoadStringA
DestroyMenu
GetClassNameA
DrawTextA
LoadCursorA
InvalidateRect
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetTopWindow
GetSysColorBrush
SetWindowTextA
GetCapture
WinHelpA
IsDialogMessageA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
KillTimer
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
GetDesktopWindow
SetRect
IsWindow
IsWindowVisible
SetCursorPos
MapWindowPoints
CopyRect
PtInRect
GetDC
SendMessageA
GetWindowRect
GetCursorPos
ScreenToClient
LoadBitmapA
EnableWindow
PostMessageA
UpdateWindow
SendDlgItemMessageA
wsprintfA
GetClassInfoA
MessageBoxA
GetSysColor
GetKeyState
GetDlgCtrlID
ShowCaret
ExcludeUpdateRgn
HideCaret
UnregisterClassA
DefDlgProcA
CharNextA
IsWindowUnicode
DrawFocusRect
gdi32
BitBlt
CreateCompatibleBitmap
Rectangle
CreateSolidBrush
CreatePen
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
CreatePatternBrush
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CreateFontIndirectA
DPtoLP
CreateDIBitmap
GetTextExtentPointA
CreateCompatibleDC
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
comctl32
ord17
wsock32
accept
ioctlsocket
htons
bind
gethostbyname
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
closesocket
htonl
recv
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ