Static task
static1
Behavioral task
behavioral1
Sample
bf12a068bc5300dee648a35459e5693341cf6f3e64c5de7a89b20537baf04949.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf12a068bc5300dee648a35459e5693341cf6f3e64c5de7a89b20537baf04949.exe
Resource
win10v2004-20220812-en
General
-
Target
bf12a068bc5300dee648a35459e5693341cf6f3e64c5de7a89b20537baf04949
-
Size
436KB
-
MD5
6c7f031fc38f061c71385f78b08e94b0
-
SHA1
7cd1aa4ccc7366fd2a75617da02c0d695fdb1f83
-
SHA256
bf12a068bc5300dee648a35459e5693341cf6f3e64c5de7a89b20537baf04949
-
SHA512
3673cd06b299609b657bbafc772a405f6433ee673de9f7147430c4820de4f6acb7381467728439ffa6331c666d7625bc08ba42de278ab73b1bb25111392c7928
-
SSDEEP
6144:HV9XkwlThiB39DqvxyLAWPlKALXqo1jmUZxL6xQGQm9UmM7I+6cw:HrXDlqqvMAWxLXqs76ve7I+L
Malware Config
Signatures
Files
-
bf12a068bc5300dee648a35459e5693341cf6f3e64c5de7a89b20537baf04949.exe windows x86
47e8b3a5dfee3d849a664d6906e8cd92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dicmngr
RegisterDictionaryA
OpenRegisterA
CloseRegister
kernel32
lstrcatA
FreeLibrary
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
GetTimeZoneInformation
TerminateProcess
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GlobalGetAtomNameA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadCodePtr
CompareStringW
SetEnvironmentVariableA
IsBadReadPtr
GetVersionExA
GetModuleFileNameA
WinExec
GetFileAttributesA
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
CreateDirectoryA
FreeResource
LockResource
LoadResource
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetCurrentThreadId
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalHandle
TlsAlloc
LocalAlloc
GetFileTime
GetFullPathNameA
FindResourceA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
IsBadWritePtr
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessVersion
GlobalFlags
GlobalFree
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcmpA
FindNextFileA
lstrcpyA
FindFirstFileA
GetLastError
FindClose
GlobalLock
GlobalUnlock
SetLastError
lstrcpynA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SizeofResource
lstrlenA
GetACP
GetPrivateProfileIntA
GetVersion
CompareStringA
LoadLibraryA
GetNumberFormatA
CreateFileA
GetFileSize
CloseHandle
GetProcessHeap
HeapAlloc
FreeEnvironmentStringsW
HeapFree
user32
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
AdjustWindowRectEx
LoadIconA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
DestroyMenu
GetMenuItemID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenu
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
CharUpperA
SetFocus
EnableWindow
IsWindowEnabled
SetWindowPos
GetDlgItem
GetSysColor
GetSysColorBrush
LoadCursorA
GetFocus
GetParent
SendMessageA
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
UnhookWindowsHookEx
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ClientToScreen
GetDC
ReleaseDC
CopyRect
MessageBoxA
IntersectRect
GetWindowLongA
SetWindowLongA
GetClientRect
MapWindowPoints
GetCursorPos
GetMenuItemCount
DispatchMessageA
GetSubMenu
PtInRect
WindowFromPoint
KillTimer
PostMessageA
IsWindow
SetTimer
DestroyIcon
SetRect
GetSystemMetrics
wsprintfA
gdi32
DeleteDC
CreateCompatibleDC
DeleteObject
Rectangle
SelectObject
CreatePen
CreateSolidBrush
PatBlt
UnrealizeObject
CreatePatternBrush
CreateBitmap
SetDIBitsToDevice
StretchDIBits
CreateCompatibleBitmap
BitBlt
SetPixel
ExtTextOutA
SetBkColor
SaveDC
RestoreDC
GetStockObject
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
PtVisible
RectVisible
TextOutA
Escape
GetObjectA
GetDeviceCaps
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
shell32
SHGetFileInfoA
comctl32
ord17
ole32
CoInitialize
CoUninitialize
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hhqg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE