Static task
static1
Behavioral task
behavioral1
Sample
baf6271f462ef294bf46558d8ca16738a2cc7a76bae1c603ec8681eeb7b942ea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
baf6271f462ef294bf46558d8ca16738a2cc7a76bae1c603ec8681eeb7b942ea.exe
Resource
win10v2004-20220812-en
General
-
Target
baf6271f462ef294bf46558d8ca16738a2cc7a76bae1c603ec8681eeb7b942ea
-
Size
274KB
-
MD5
32780a4505b3a0bc7cd64e19b4f41060
-
SHA1
b94b772e513b818b8a33a5808bc27273060f7cb7
-
SHA256
baf6271f462ef294bf46558d8ca16738a2cc7a76bae1c603ec8681eeb7b942ea
-
SHA512
141f787cade80b657b94906ad06d950c98ee880fa4c4dd4c873c088dbb1c43e035eb95e3acaf9f7c572b0345b657564c16aee7e995951aa49021d24b95d8c2ed
-
SSDEEP
6144:hbCX6abk+bqY74V/LzEBXCQogY9BikxpLqUatw4:hb1ZYmopCQii6itw4
Malware Config
Signatures
Files
-
baf6271f462ef294bf46558d8ca16738a2cc7a76bae1c603ec8681eeb7b942ea.exe windows x86
76caa9b67d83aa8d65f56c4df8876e41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
WideCharToMultiByte
GlobalFindAtomA
lstrlenW
GetCurrentProcess
CreateFileA
HeapAlloc
LoadLibraryW
FindResourceW
SetUnhandledExceptionFilter
lstrcpyW
MultiByteToWideChar
GetTickCount
GetSystemTimeAsFileTime
HeapFree
lstrcmpA
SetLastError
SystemTimeToFileTime
GetProcessHeap
CloseHandle
GetCurrentProcessId
QueryPerformanceCounter
GetLocalTime
psapi
EmptyWorkingSet
GetPerformanceInfo
GetProcessImageFileNameA
EnumProcessModules
EnumPageFilesW
EnumPageFilesA
olecli32
LeSetData
LeQueryOpen
LeGetUpdateOptions
LeQueryBounds
LeQueryOutOfDate
LeSaveToStream
LeSetBounds
LeObjectConvert
LeObjectLong
LeRelease
LeReconnect
Sections
.text Size: 269KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ