Static task
static1
Behavioral task
behavioral1
Sample
bf369aa9c5309eafe5f7a56d29394aac6aea5a48a9453d590991e3eb88cf7ea0.exe
Resource
win7-20220812-en
General
-
Target
bf369aa9c5309eafe5f7a56d29394aac6aea5a48a9453d590991e3eb88cf7ea0
-
Size
133KB
-
MD5
314cfe47b50159decfb1c31b41946a10
-
SHA1
1bd54bbb22f3a6505c76da4a56ebf78849c996bd
-
SHA256
bf369aa9c5309eafe5f7a56d29394aac6aea5a48a9453d590991e3eb88cf7ea0
-
SHA512
c9e88d1bdf4e16b0277270d1bb6bc02b54806f0b954c459eb3a285fcf425a2e297b096a38fef76fd21f2794588759f4cb2207dcf2d22a9bfbf66ead5091eba83
-
SSDEEP
3072:GgOTm12kvJN76K0OTEU+hLwMjGSff5nshFaLak6qkPX:STmHr76K0OTXYLwMH35nUa8qkPX
Malware Config
Signatures
Files
-
bf369aa9c5309eafe5f7a56d29394aac6aea5a48a9453d590991e3eb88cf7ea0.exe windows x86
7ba5ebec4a8c50fa8bcb3042b4a60a33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetLocaleInfoA
GetThreadLocale
HeapDestroy
HeapReAlloc
HeapSize
CreateThread
CloseHandle
SuspendThread
TerminateThread
FormatMessageA
lstrlenA
HeapAlloc
Sleep
GetProcessHeap
HeapFree
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
SetProcessShutdownParameters
WaitForSingleObject
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
GetVersionExA
LocalAlloc
lstrcmpA
LocalFree
InterlockedExchange
CreateEventA
CreateMutexA
GetTickCount
ResetEvent
SetEvent
ReleaseMutex
IsBadStringPtrA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
user32
ShowWindow
CreateWindowExA
PostQuitMessage
PeekMessageA
MsgWaitForMultipleObjects
UpdateWindow
DefWindowProcA
RegisterClassExA
LoadCursorA
DispatchMessageA
TranslateMessage
GetMessageA
LoadStringA
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
RegisterWindowMessageA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ole32
CoUninitialize
CoInitialize
CLSIDFromString
OleRun
CoCreateInstance
oleaut32
VariantClear
GetErrorInfo
SysAllocString
SysFreeString
SysStringLen
msvcp80
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr80
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
_acmdln
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_purecall
_vsnprintf
_encode_pointer
atoi
_ismbcdigit
wcslen
strcat
strcpy
_ismbblead
strlen
_mbclen
_mbsinc
_mbslen
_mbsnbcmp
_mbsrchr
malloc
free
sprintf_s
__dllonexit
_unlock
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
memset
_CxxThrowException
_initterm
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE