Static task
static1
Behavioral task
behavioral1
Sample
bfec30b9b32b39407605be6e1ec1542cc3aca150cff9da8d35f5cfe0a4b9302c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfec30b9b32b39407605be6e1ec1542cc3aca150cff9da8d35f5cfe0a4b9302c.exe
Resource
win10v2004-20220812-en
General
-
Target
bfec30b9b32b39407605be6e1ec1542cc3aca150cff9da8d35f5cfe0a4b9302c
-
Size
64KB
-
MD5
81f05509f073658174354bc1da6b384e
-
SHA1
27459f9238df0ddfe3522e90b9f60894c6f5c40b
-
SHA256
bfec30b9b32b39407605be6e1ec1542cc3aca150cff9da8d35f5cfe0a4b9302c
-
SHA512
9d3e3c926070fd202e7d3ba28f73d8a65d81e31f427c5ac624fa62165bff866518c98b85e0a095d9896cad122296025dcd295e42d0df2b5bb70c62bb001dc0d2
-
SSDEEP
768:NZFw+zCCCk5rzTbGvYNUCoEggX2TJuCoO1unZloZCHhqF/+D+RbH9to/ZigHSbPH:NP7zCPEZU4NHCoO4njkb6E9yhigybZ
Malware Config
Signatures
Files
-
bfec30b9b32b39407605be6e1ec1542cc3aca150cff9da8d35f5cfe0a4b9302c.exe windows x86
5e9ea9b95803e581fd848aaae3f6fb81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFileEx
GetPrivateProfileIntA
Heap32First
LoadLibraryA
GetPrivateProfileIntA
lstrcpyW
GetLogicalDrives
Sleep
GetPrivateProfileSectionA
GetExitCodeProcess
FindResourceW
GetCurrentDirectoryA
InterlockedDecrement
HeapCreate
GetDiskFreeSpaceW
GetModuleHandleW
InterlockedIncrement
SetEnvironmentVariableA
WaitForSingleObject
GetLongPathNameA
GetStringTypeW
lstrcmpA
GetDiskFreeSpaceW
apphelp
ApphelpCheckIME
SdbCreateMsiTransformFile
ApphelpCheckExe
AllowPermLayer
clbcatq
SetupOpen
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetupOpen
ComPlusMigrate
SetSetupSave
SetSetupSave
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE