Static task
static1
Behavioral task
behavioral1
Sample
bf9ffeaf0d9031d420b2fa3f581cee6729637bca81869e69a05206b419765a7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf9ffeaf0d9031d420b2fa3f581cee6729637bca81869e69a05206b419765a7d.exe
Resource
win10v2004-20220812-en
General
-
Target
bf9ffeaf0d9031d420b2fa3f581cee6729637bca81869e69a05206b419765a7d
-
Size
124KB
-
MD5
83e224ade47260821439898557acac10
-
SHA1
981ebfef6624d1a2d38aafa56d09ce4a61e96273
-
SHA256
bf9ffeaf0d9031d420b2fa3f581cee6729637bca81869e69a05206b419765a7d
-
SHA512
97496fd08841f838116c576cd6df8e0549e1cdb3aff52a8e79fc7f000e13cd44c84931d3452464b07037e0cb415b4bc0a2cd77013f72b16d4f25524d287273b0
-
SSDEEP
3072:PVEC0bZyecCB0zH2k3neMnfoAK9Yl95te:PVkAeLazHf3ne6foAK9YT/
Malware Config
Signatures
Files
-
bf9ffeaf0d9031d420b2fa3f581cee6729637bca81869e69a05206b419765a7d.exe windows x86
9c98aaf6632615a7f780f461fbb8a5f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
ole32
CoUninitialize
CoFileTimeNow
CoCreateInstance
StgOpenStorage
CoInitialize
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
kernel32
DisableThreadLibraryCalls
GetFileAttributesA
GetTempPathA
lstrcpyA
GlobalDeleteAtom
VirtualQueryEx
DeleteFileA
EnumResourceNamesW
ResumeThread
ExitProcess
GetCurrentThread
SetPriorityClass
OutputDebugStringA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ