Static task
static1
Behavioral task
behavioral1
Sample
bf29d6052d72585a31e4041d73b4770c4beb397f09b977c89fd9b110ed0e6beb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf29d6052d72585a31e4041d73b4770c4beb397f09b977c89fd9b110ed0e6beb.exe
Resource
win10v2004-20220812-en
General
-
Target
bf29d6052d72585a31e4041d73b4770c4beb397f09b977c89fd9b110ed0e6beb
-
Size
49KB
-
MD5
0ac337cc53397ca2221cf518481d5c80
-
SHA1
7168e5a1dad751b2df851b9d6f25ae73907b15cb
-
SHA256
bf29d6052d72585a31e4041d73b4770c4beb397f09b977c89fd9b110ed0e6beb
-
SHA512
1a49e466efa67aac59b0f4730f5d92cfd253056cc9dceea4522630119c3124180b100f94c7a91916211d71f50580337eaab0617e674c26ab917ef74827e0b71d
-
SSDEEP
768:GNjZpPZiTsIgtyNNGtVFruVOafbFP0rk2UPyBOT9BP5lK4LyNMFHV/+ay:qAVAuZFP0rXyyoTtl3LrF1/+x
Malware Config
Signatures
Files
-
bf29d6052d72585a31e4041d73b4770c4beb397f09b977c89fd9b110ed0e6beb.exe windows x86
43467a54f84514d56c28e5281c7a8804
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapFree
GetProcessHeap
HeapAlloc
GetLastError
SetEnvironmentVariableW
WaitForMultipleObjects
SetEvent
OpenEventW
OpenProcess
CreateEventW
GetCommandLineW
HeapSetInformation
SetErrorMode
GetErrorMode
InterlockedIncrement
WaitForSingleObject
InterlockedDecrement
ResetEvent
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemInfo
GetTickCount
WaitForSingleObjectEx
HeapSize
CreateSemaphoreW
ReleaseSemaphore
msvcrt
_onexit
_lock
__dllonexit
_unlock
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
memcpy
iswdigit
iswalpha
towupper
__p__fmode
memset
mf
MFCreatePMPHost
mfplat
MFStartup
MFHeapAlloc
MFHeapFree
MFShutdown
ole32
StringFromCLSID
CreateItemMoniker
GetRunningObjectTable
CoCreateInstance
CoCreateFreeThreadedMarshaler
CLSIDFromString
CoInitializeEx
CoInitializeSecurity
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemFree
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mttsnmr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE