Static task
static1
Behavioral task
behavioral1
Sample
bfe7c79323c4829447e86a570088d879ac04c8b2293b24f04246fb5cd0e8a357.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bfe7c79323c4829447e86a570088d879ac04c8b2293b24f04246fb5cd0e8a357.dll
Resource
win10v2004-20220812-en
General
-
Target
bfe7c79323c4829447e86a570088d879ac04c8b2293b24f04246fb5cd0e8a357
-
Size
32KB
-
MD5
4e8b8c0deb00eb8246538853a26730ea
-
SHA1
51cd5e7ae68e75c711397339a6f1a1af6c80b7fb
-
SHA256
bfe7c79323c4829447e86a570088d879ac04c8b2293b24f04246fb5cd0e8a357
-
SHA512
a45dc824c3a7e26ac7971e0e5f07c56d331e9ce4b6b155ee081068aac56bec71bc3d22e5bc6edd5903b5474d6a36030243638cb51f8918ddd2d6e7819b399cda
-
SSDEEP
384:l6QybD0+hl6ptmme7tIRCOIm0Uj5LBGl/07w+GU6U/ms1dhGRDj8M8fF7:l6Qyk+upttatIREm0kAl6YU/mIUq7
Malware Config
Signatures
Files
-
bfe7c79323c4829447e86a570088d879ac04c8b2293b24f04246fb5cd0e8a357.dll windows x86
e97062e4c10d2bf2016e20ac0def8cf3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
Sleep
VirtualProtect
msvcrt
_sleep
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strstr
user32
GetAsyncKeyState
MapVirtualKeyA
MessageBeep
MessageBoxA
keybd_event
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ