Static task
static1
Behavioral task
behavioral1
Sample
bf5618fd96d197f14e7f658496a5e1090f2fc9e6967635d69b1fd723873a5d72.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf5618fd96d197f14e7f658496a5e1090f2fc9e6967635d69b1fd723873a5d72.exe
Resource
win10v2004-20220812-en
General
-
Target
bf5618fd96d197f14e7f658496a5e1090f2fc9e6967635d69b1fd723873a5d72
-
Size
25KB
-
MD5
68d10bfe59634b637fe76238fd4c660b
-
SHA1
5d54256fbd14b77276c88d0c69f35e30fee8d941
-
SHA256
bf5618fd96d197f14e7f658496a5e1090f2fc9e6967635d69b1fd723873a5d72
-
SHA512
dee30b04f4f4b7e63666803c2e2a089601c5252931dcada3510e6528055ea2e40fb5cfac30661dda4d1242b586ca3e7c6ec9783ca1de6a59f9bab87813b8fe7a
-
SSDEEP
384:lQPryEQIFU63v7X/VOCm/8gzkZzsJS1S+pRBV9t3aqnW9A9Z1LhNzQT6Uz:lQWEQe/NOaggzsJSBoqnW9KLPMb
Malware Config
Signatures
Files
-
bf5618fd96d197f14e7f658496a5e1090f2fc9e6967635d69b1fd723873a5d72.exe windows x86
952f6352c2892ac39a6f2a55c4c3183e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncpy
strstr
strrchr
strncmp
srand
memmove
_except_handler3
malloc
rand
_ftol
tolower
memcpy
_strlwr
_itoa
__CxxFrameHandler
kernel32
GetCurrentThread
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetCurrentThreadId
GetCommandLineA
CopyFileA
GetStartupInfoA
CreateProcessA
SetUnhandledExceptionFilter
ExpandEnvironmentStringsA
GetShortPathNameA
WaitForSingleObject
CreateEventA
SleepEx
GetTickCount
WriteFile
MoveFileA
GetTempPathA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
Sleep
GetProcAddress
GetCurrentProcess
GetLastError
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
GetCurrentProcessId
user32
GetActiveWindow
FlashWindow
ws2_32
listen
Sections
.xext Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ