Static task
static1
Behavioral task
behavioral1
Sample
bfc8ea4482e99e5cd5d4bc73256d796f4b16c426201edde89ed8c3a296d9d553.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfc8ea4482e99e5cd5d4bc73256d796f4b16c426201edde89ed8c3a296d9d553.exe
Resource
win10v2004-20220901-en
General
-
Target
bfc8ea4482e99e5cd5d4bc73256d796f4b16c426201edde89ed8c3a296d9d553
-
Size
523KB
-
MD5
3675f9ec7a7c2ede4f0280b79e1ccb8c
-
SHA1
5d35a4e625d1dd76dd796ddb4004941995aaa3c9
-
SHA256
bfc8ea4482e99e5cd5d4bc73256d796f4b16c426201edde89ed8c3a296d9d553
-
SHA512
9ae7136a43c0dbc1106eb7f2e3afc474a244c651b937b2192e0ce02bb3e50303d29c574da5586489166c295c5dec8b6dc363da02b36697a6a836ecd1540b8561
-
SSDEEP
12288:Tnnk9+5kfgBIUW2TnIM4kGJozjziJh5o6LO6ldHuZm:TIakfgBIUW2WRoXehXLOmdHuZm
Malware Config
Signatures
Files
-
bfc8ea4482e99e5cd5d4bc73256d796f4b16c426201edde89ed8c3a296d9d553.exe windows x86
f0da8d6a0b190ddf9cbeb8412662cae3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
DdeFreeDataHandle
LookupIconIdFromDirectoryEx
RegisterClassExA
RegisterClassA
WindowFromDC
DdeQueryConvInfo
LoadCursorFromFileA
EnumDisplayDevicesW
SetShellWindow
LoadKeyboardLayoutW
DlgDirSelectExA
MapDialogRect
DestroyMenu
kernel32
GetCurrentThreadId
EnumResourceTypesA
GetTickCount
LoadLibraryA
WriteConsoleW
Sleep
GetProcAddress
GetLastError
CreateFileA
GetProcessHeap
RemoveDirectoryW
GetLocaleInfoA
SetEnvironmentVariableA
WriteConsoleA
GetCPInfo
QueryPerformanceCounter
SetStdHandle
InterlockedExchange
GetEnvironmentStrings
SetEndOfFile
GetModuleFileNameA
MapViewOfFile
SetUnhandledExceptionFilter
GetConsoleMode
GetOEMCP
TlsFree
GetModuleHandleA
EnumSystemLocalesA
GetACP
GetFileType
EnterCriticalSection
FreeLibrary
TlsGetValue
GetVersionExA
TlsSetValue
HeapCreate
GetConsoleCP
GetCurrentProcess
FreeEnvironmentStringsW
MultiByteToWideChar
LoadResource
SetFilePointer
TerminateProcess
HeapAlloc
WriteFile
DeleteCriticalSection
CloseHandle
GetLocaleInfoW
IsValidLocale
WaitNamedPipeW
HeapSize
SetHandleCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetSystemInfo
GetCommandLineA
LCMapStringA
IsValidCodePage
SetLastError
GetTimeFormatA
CreateMutexA
WideCharToMultiByte
VirtualAlloc
UnhandledExceptionFilter
ExitProcess
InterlockedIncrement
HeapFree
VirtualQuery
VirtualFree
InitializeCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCursorInfo
GetConsoleOutputCP
LCMapStringW
GetDateFormatA
LockFile
GetCurrentThread
GetStringTypeW
TlsAlloc
InterlockedDecrement
HeapDestroy
GetEnvironmentStringsW
CompareStringA
HeapReAlloc
IsDebuggerPresent
CreateMutexW
ReadFile
FlushFileBuffers
GetCompressedFileSizeW
FreeEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
GetStdHandle
GetStringTypeA
GetCurrentProcessId
CompareStringW
OpenMutexA
SetConsoleCtrlHandler
advapi32
RegLoadKeyW
RegOpenKeyA
LookupPrivilegeNameW
wininet
FindNextUrlCacheEntryW
GopherOpenFileW
ShowClientAuthCerts
InternetSecurityProtocolToStringA
gdi32
AnimatePalette
GdiPlayScript
gdiPlaySpoolStream
GetWinMetaFileBits
CreateDIBPatternBrush
SetBoundsRect
BitBlt
FillPath
GetMetaFileBitsEx
GetSystemPaletteUse
GetTextMetricsA
UnrealizeObject
SetBitmapBits
PaintRgn
Polyline
Polygon
GetMetaFileA
shell32
SheChangeDirA
SHFileOperationW
Sections
.text Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ