Static task
static1
Behavioral task
behavioral1
Sample
bf065a0e216fee79af19b6f7d7478ccbf59c3e4ca9e941a372f9c245e2d15973.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf065a0e216fee79af19b6f7d7478ccbf59c3e4ca9e941a372f9c245e2d15973.exe
Resource
win10v2004-20220901-en
General
-
Target
bf065a0e216fee79af19b6f7d7478ccbf59c3e4ca9e941a372f9c245e2d15973
-
Size
299KB
-
MD5
6bebbec201d22439b3ad5f33d51e9a00
-
SHA1
1cf35b330733d3d8d4d6d7851a08f8c1dc4f33a3
-
SHA256
bf065a0e216fee79af19b6f7d7478ccbf59c3e4ca9e941a372f9c245e2d15973
-
SHA512
2e1ef3cab771af2829ec475c11b53cb9c0363fac71732364ea21b678f0ebce986e01fee3a9d7dabf564c1c23a338f8ef4a28139811ba4e148d5cafec0c104506
-
SSDEEP
6144:7FuWnOE7QTPbInSTwOq05z1nu795b6lw9uQYHHCQoy0LQp:JNtXnSZZnux0w5b/8
Malware Config
Signatures
Files
-
bf065a0e216fee79af19b6f7d7478ccbf59c3e4ca9e941a372f9c245e2d15973.exe windows x86
a74a6e6963f06981cc12c5e9ef150693
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
HeapSize
GetExitCodeThread
RemoveDirectoryA
GetModuleHandleA
FindResourceA
IsValidCodePage
SetLastError
IsBadWritePtr
ResetEvent
VirtualProtect
GetLocaleInfoA
GetFileAttributesA
MapViewOfFile
CreateMailslotW
FindClose
GetFileAttributesA
CreateDirectoryA
CancelIo
GetProcessHeap
GetDriveTypeW
user32
LoadCursorA
GetWindowLongW
PeekMessageA
GetWindowTextW
LoadImageW
GetCapture
SetFocus
IsWindow
PostMessageW
wsprintfA
DispatchMessageA
IsDialogMessageA
SetCursor
ipsmsnap
DllGetClassObject
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE