Static task
static1
Behavioral task
behavioral1
Sample
bf67960b7352546f12c3a462ed7d9f123787c2468e04e00ee3bd9124c49ca48c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf67960b7352546f12c3a462ed7d9f123787c2468e04e00ee3bd9124c49ca48c.exe
Resource
win10v2004-20220812-en
General
-
Target
bf67960b7352546f12c3a462ed7d9f123787c2468e04e00ee3bd9124c49ca48c
-
Size
271KB
-
MD5
6793607fc2b672ee8115967726d95270
-
SHA1
2eb47b2f9b88f80841a908233d5fb0c8629c7c38
-
SHA256
bf67960b7352546f12c3a462ed7d9f123787c2468e04e00ee3bd9124c49ca48c
-
SHA512
3f6bbbf47a8464b8c1fdb2503588d6ea9e9669ba2138f7ae3ca4e43c05bbdd62e46265579ee5055afe891c2e0a12a6d1021507fba293f67de64b777678017e5e
-
SSDEEP
3072:tKMfb6tt5iH2ml8lbPNpik9dwZ4U8wHsVwz22dmOmRf7pT8ar4awb7KU+:tTl8lbLoZf8+mg6Oc7pT8Xawvx+
Malware Config
Signatures
Files
-
bf67960b7352546f12c3a462ed7d9f123787c2468e04e00ee3bd9124c49ca48c.exe windows x86
3bbdc9641ada9c3928ad312e7847453a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
RegOpenKeyExA
user32
wsprintfA
msvcrt
memset
ntdll
RtlAdjustPrivilege
Sections
.text Size: - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs0 Size: - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs1 Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE