Static task
static1
Behavioral task
behavioral1
Sample
bdf5997d196267ed9f8af5436487ba05205a5956440971d8731402fdd29da525.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdf5997d196267ed9f8af5436487ba05205a5956440971d8731402fdd29da525.exe
Resource
win10v2004-20220812-en
General
-
Target
bdf5997d196267ed9f8af5436487ba05205a5956440971d8731402fdd29da525
-
Size
196KB
-
MD5
5689dcb2065f21cb7275d321f6804d44
-
SHA1
1ae81a20de050a8ce22f92866e41856704e07127
-
SHA256
bdf5997d196267ed9f8af5436487ba05205a5956440971d8731402fdd29da525
-
SHA512
14043b2a63ea98f5c382efe194a69e39046f0038eb6bb53a73c6b4174ce28bd43d64e5dbfc59253b8209ebc9fb32aa472a6fbe10c6db84199b729bfb65bc13ad
-
SSDEEP
3072:FWJs8tNwrJ0XQSP6pHtX2TEq4tduAH6ukskES0byZuUl6Gjr7:F6s8t+J0+XO6duAH6dubyZLJr
Malware Config
Signatures
Files
-
bdf5997d196267ed9f8af5436487ba05205a5956440971d8731402fdd29da525.exe windows x86
6ce4668ca28e43b9fafaf9da4af0ec2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHEnumValueA
SHSetValueA
SHStrDupA
SHDeleteKeyA
PathFileExistsA
PathIsDirectoryA
PathGetCharTypeA
SHDeleteValueA
SHQueryValueExA
kernel32
lstrlenA
LoadLibraryExA
IsBadReadPtr
GetOEMCP
ExitProcess
GetModuleHandleA
GlobalAlloc
LoadLibraryA
GetLastError
GetCommandLineW
GetACP
VirtualAllocEx
ExitThread
GetProcAddress
GetCommandLineA
ole32
CoDisconnectObject
CoCreateInstanceEx
msvcrt
acos
sqrt
Sections
CODE Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 659B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 734B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ