Static task
static1
Behavioral task
behavioral1
Sample
bc93849edaf738ea6d1a0b68cd5ff59c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc93849edaf738ea6d1a0b68cd5ff59c.exe
Resource
win10v2004-20240226-en
General
-
Target
bc93849edaf738ea6d1a0b68cd5ff59c
-
Size
44KB
-
MD5
bc93849edaf738ea6d1a0b68cd5ff59c
-
SHA1
80071c5c7760fc058379a3220f6d8c9ee7156da8
-
SHA256
9dc04cb94e1278bd7568bd21d7651d65d0d1b9822c74090b28aa2ee0de757862
-
SHA512
16909d17ad61c0e4796ca1bb61a8d3f954554407f396ea24365a8a4aa69d7b2f17e6346bf1be531fdfd42847030abe72025a28916bb4d1f6fee2b025530f6b26
-
SSDEEP
384:MnFvuwdFTTvWSE9Bc50fUcNnH7XNt8M154BRjCfrSwrygFM7+isBCoXkZMB:Mnw0PvWXe0MU3BYRGmwrXArsBCoX+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc93849edaf738ea6d1a0b68cd5ff59c
Files
-
bc93849edaf738ea6d1a0b68cd5ff59c.exe windows:4 windows x86 arch:x86
0beee904a08e5103f733a4cb5680d243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegDeleteValueA
GetUserNameA
wsock32
socket
inet_ntoa
connect
htons
ioctlsocket
kernel32
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
CreateThread
DeleteFileA
CloseHandle
WriteFile
CreateFileA
GetLastError
GetTickCount
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE