Static task
static1
Behavioral task
behavioral1
Sample
bfb1fe112955d1bb8ce981d38f9b371340b7e3d97c21670d95cb0ae2f33402cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfb1fe112955d1bb8ce981d38f9b371340b7e3d97c21670d95cb0ae2f33402cf.exe
Resource
win10v2004-20220812-en
General
-
Target
bfb1fe112955d1bb8ce981d38f9b371340b7e3d97c21670d95cb0ae2f33402cf
-
Size
775KB
-
MD5
81715fc41fabe80c5db05692e47ebaf0
-
SHA1
2d96ae98a7503e18219ec9218753d783861c9ea0
-
SHA256
bfb1fe112955d1bb8ce981d38f9b371340b7e3d97c21670d95cb0ae2f33402cf
-
SHA512
4267a62c8762debc3205bd07090b3c86c2d08565a84764c20f5161717ca80d6ec6db6bd34ecf43134941a21d1f797537c7d0c9532acd839595c01d56873ef727
-
SSDEEP
24576:T6ttbKmMDMNgWq4axIq/FkLBQg3fK1vqc3zo4OG8bT:OxHNgWq4a2q/W2X4c3zoP3bT
Malware Config
Signatures
Files
-
bfb1fe112955d1bb8ce981d38f9b371340b7e3d97c21670d95cb0ae2f33402cf.exe windows x86
27e5dd9a8098bc848372d69fc42567ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryA
ReleaseMutex
GetStartupInfoA
HeapCreate
GetLastError
GetPriorityClass
SetEvent
lstrcpyW
WriteConsoleW
WriteConsoleW
IsDebuggerPresent
CopyFileW
GetModuleHandleA
DisconnectNamedPipe
lstrlenW
GetStdHandle
CloseHandle
WriteConsoleW
GetFileAttributesA
ClearCommBreak
CreatePipe
msftedit
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichEditWndProc
shell32
SHGetDiskFreeSpaceA
SHFree
DragQueryFileA
ExtractIconA
SHGetSettings
DllUnregisterServer
SHGetMalloc
DuplicateIcon
ShellMessageBoxA
DragFinish
DragAcceptFiles
ShellAboutA
StrChrA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ