Static task
static1
Behavioral task
behavioral1
Sample
bfeed4c5ee752d80708302a03d214ccdca53ba39a872a760b2010041dfc05996.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfeed4c5ee752d80708302a03d214ccdca53ba39a872a760b2010041dfc05996.exe
Resource
win10v2004-20220812-en
General
-
Target
bfeed4c5ee752d80708302a03d214ccdca53ba39a872a760b2010041dfc05996
-
Size
300KB
-
MD5
6d8f968bac3d57b0c5e54d850ba61510
-
SHA1
755de79e5baec20927109f2a85b5737025e1d01e
-
SHA256
bfeed4c5ee752d80708302a03d214ccdca53ba39a872a760b2010041dfc05996
-
SHA512
6e0c210c998fe2e01454ecaade2fb2eeecd92f99605b7d5a200d1294f2d17a3de13c67a06be98d26b0141c25914a4b67d210fe340362014275c3e09563f34132
-
SSDEEP
6144:kwGWnyfoXW4LYxRzT5LV70nfG1r59hUhBaZLCq4pHUlyBt+V:5yfoXwR/NV4nerUhgZLTWHBg
Malware Config
Signatures
Files
-
bfeed4c5ee752d80708302a03d214ccdca53ba39a872a760b2010041dfc05996.exe windows x86
93a0e8a784795bc093533aad8ba393da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetExitCodeThread
CancelIo
GetFileAttributesA
GetDriveTypeW
GetFileAttributesA
SetLastError
FindClose
CreateMailslotW
IsBadWritePtr
ResetEvent
GetModuleHandleA
IsValidCodePage
VirtualProtect
GetTickCount
FindResourceA
GetLocaleInfoA
HeapSize
CreateDirectoryA
MapViewOfFile
RemoveDirectoryA
user32
LoadImageW
IsDialogMessageA
wsprintfA
GetWindowLongW
PostMessageW
GetCapture
PeekMessageA
SetCursor
LoadCursorA
DispatchMessageA
GetWindowTextW
SetFocus
IsWindow
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE