Static task
static1
Behavioral task
behavioral1
Sample
bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe
Resource
win10v2004-20220812-en
General
-
Target
bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85
-
Size
83KB
-
MD5
6e62f43bf3897a46bff45f2c5cef25b0
-
SHA1
727a4071426c94d8833452987103e49bd8d110e8
-
SHA256
bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85
-
SHA512
41a9ebd5e1a0ec72b566d4dfd9dbd2862258d45bbbb06b126c0432e06beb6a664b6ff764b4905a126bd9cf95437010d258f215bd409ede098f18c5146b9511d4
-
SSDEEP
1536:QKArY6BLoJth8XZNX6/kgHi1jNGfQ3vNSZqMXhR6FwORrBh/Ms:FijBG8X7X6/kgmNGI31IKdFBht
Malware Config
Signatures
Files
-
bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe windows x86
98509a2d410e02efeb2173f523ead715
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowPos
UnhookWindowsHookEx
EqualRect
SetWindowTextA
GetSubMenu
GetScrollPos
EnumWindows
EnableMenuItem
FrameRect
PostQuitMessage
GetMessageA
GetSysColorBrush
GetSysColor
kernel32
GetFileAttributesA
FileTimeToSystemTime
GetThreadLocale
SetUnhandledExceptionFilter
GetStartupInfoA
GetTimeZoneInformation
InterlockedExchange
GetCurrentProcessId
GetSystemTime
RtlUnwind
VirtualAllocEx
ExitProcess
QueryPerformanceCounter
GetTempPathA
gdi32
CopyEnhMetaFileA
FillRgn
SelectClipPath
DPtoLP
GetMapMode
ExcludeClipRect
CreateCompatibleBitmap
CreateICW
SetViewportExtEx
ole32
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoInitialize
StgOpenStorage
OleRun
DoDragDrop
CoInitializeSecurity
CoRevokeClassObject
advapi32
GetUserNameA
AdjustTokenPrivileges
RegCreateKeyA
RegQueryValueExW
FreeSid
GetSecurityDescriptorDacl
RegCreateKeyExW
CryptHashData
QueryServiceStatus
CheckTokenMembership
msvcrt
_lock
__initenv
_CIpow
_flsbuf
iswspace
puts
strncpy
raise
strcspn
__setusermatherr
_mbscmp
__getmainargs
fflush
_fdopen
strlen
signal
fprintf
_strdup
comctl32
ImageList_GetBkColor
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Destroy
ImageList_SetIconSize
ImageList_Write
ImageList_DrawEx
ImageList_DragEnter
ImageList_GetIcon
CreatePropertySheetPageA
InitCommonControls
ImageList_LoadImageA
ImageList_ReplaceIcon
shell32
DragQueryFileA
SHGetPathFromIDList
DragAcceptFiles
ShellExecuteEx
ExtractIconExW
DoEnvironmentSubstW
ShellExecuteW
DragQueryFileW
CommandLineToArgvW
ExtractIconW
SHBrowseForFolderA
oleaut32
SafeArrayUnaccessData
SysReAllocStringLen
SafeArrayGetUBound
VariantCopy
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayRedim
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE