Static task
static1
Behavioral task
behavioral1
Sample
bf6851178fc4cb093cd73ee42d870de49c047e15f63938d288a184d010bc6595.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf6851178fc4cb093cd73ee42d870de49c047e15f63938d288a184d010bc6595.exe
Resource
win10v2004-20220812-en
General
-
Target
bf6851178fc4cb093cd73ee42d870de49c047e15f63938d288a184d010bc6595
-
Size
522KB
-
MD5
6762d710c52e0bebe215dad65e1adcf0
-
SHA1
71bc81a9f87307b9a093072bc92d230ef815b3c0
-
SHA256
bf6851178fc4cb093cd73ee42d870de49c047e15f63938d288a184d010bc6595
-
SHA512
aef684193c8a276878c9c94c81692f92cf6945320c395cf1c56319f749362a5a9f5c49578079e424b36e62164711c181a25e086b627ba667c7d66a77fa0df044
-
SSDEEP
12288:LGRB5yXOtGd9kTcznni+uTSsPvL/d62qbS1nRLHP1b:LGv5SUTcbiZXPz0z2tpx
Malware Config
Signatures
Files
-
bf6851178fc4cb093cd73ee42d870de49c047e15f63938d288a184d010bc6595.exe windows x86
763bc658a410ba8664c756d85ed0e131
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptAcquireContextW
CryptGetHashParam
CryptCreateHash
CryptDestroyHash
RegEnumKeyExA
user32
ToUnicode
GetClipboardData
LoadCursorA
GetWindowLongA
OpenWindowStationA
kernel32
WaitForSingleObject
CloseHandle
LeaveCriticalSection
VirtualProtect
VirtualAlloc
GetModuleHandleA
shlwapi
wnsprintfW
wnsprintfA
SHDeleteKeyA
wvnsprintfA
Sections
.test Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE