Static task
static1
Behavioral task
behavioral1
Sample
bf454766356df27628695ad1e345a18cecf867c2584bce1949d04dc38b4876c0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf454766356df27628695ad1e345a18cecf867c2584bce1949d04dc38b4876c0.exe
Resource
win10v2004-20220812-en
General
-
Target
bf454766356df27628695ad1e345a18cecf867c2584bce1949d04dc38b4876c0
-
Size
572KB
-
MD5
09fb88f376d332dcaf9c1ae054486193
-
SHA1
0a9cdd5ebb32d61263d03ba23fdfa49a8ee6b92c
-
SHA256
bf454766356df27628695ad1e345a18cecf867c2584bce1949d04dc38b4876c0
-
SHA512
465fa44b821d13d93a26a8ab6622f43d8f462297135aaea0b97b9acdbfa526d8992e95b7a2236ecd0c1c9dcc18afa7932925bcb7034b443ed215a162f4cc87c7
-
SSDEEP
12288:rTVDueX6eNKcgjJLm8LXMYUiOrrNNWMXyHTwpS:rTVDueKeuj/gYUi8FXyj
Malware Config
Signatures
Files
-
bf454766356df27628695ad1e345a18cecf867c2584bce1949d04dc38b4876c0.exe windows x86
0619ba1b1ebb3d3dc8fe6a5122ce6b20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CloseHandle
CreateFileA
OpenEventA
CreateMutexA
InterlockedExchange
CreateEventA
GetLastError
VirtualAlloc
GetProcAddress
Sleep
LoadLibraryA
WriteFile
CreatePipe
GetModuleHandleA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
SetFilePointer
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
RaiseException
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
LCMapStringA
LCMapStringW
WriteConsoleA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rle Size: 8KB - Virtual size: 457KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ