Static task
static1
Behavioral task
behavioral1
Sample
bf5c964317f280b30266bfbdff4f6a34aea61d5b13f5e0ef6b3a99f595f6629c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf5c964317f280b30266bfbdff4f6a34aea61d5b13f5e0ef6b3a99f595f6629c.exe
Resource
win10v2004-20220812-en
General
-
Target
bf5c964317f280b30266bfbdff4f6a34aea61d5b13f5e0ef6b3a99f595f6629c
-
Size
305KB
-
MD5
5533973513d65bfcb0ab867cf01c3e8e
-
SHA1
14f1d06f63371bfb4e665d31bb49cfb61e4c20ed
-
SHA256
bf5c964317f280b30266bfbdff4f6a34aea61d5b13f5e0ef6b3a99f595f6629c
-
SHA512
338308863fe85a14f31d53b22c07198a2eda32df0d3260df50fbce220b514e52405d6a1ec021455fcbafe37f6089e9bf785651a868df3f009a2979da0bb48952
-
SSDEEP
6144:okiHDPnPsHhCeuYw/F7EUqxiC2sCYT80Q+1DYfplv7sraeFdj55:okijPnPuqFXnD0KTv70d
Malware Config
Signatures
Files
-
bf5c964317f280b30266bfbdff4f6a34aea61d5b13f5e0ef6b3a99f595f6629c.exe windows x86
cd1bc0ce6d30bd7d943854630798afa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
GetStringTypeA
GetModuleHandleA
SetFileTime
GetExitCodeProcess
lstrcpyW
lstrcatA
CloseHandle
ReadFile
LeaveCriticalSection
GetStartupInfoW
HeapCreate
SetFileTime
GetLastError
CreateEventA
SetConsoleTitleA
HeapSize
GetFileSize
LoadLibraryA
InterlockedExchange
IsBadWritePtr
mstscax
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
shell32
DragAcceptFiles
SHGetMalloc
ExtractIconA
ShellMessageBoxW
SHFree
ShellAboutA
SHGetSettings
DllUnregisterServer
StrChrA
DragQueryFileA
DragFinish
SHGetDiskFreeSpaceA
DuplicateIcon
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ