Static task
static1
Behavioral task
behavioral1
Sample
bf9629cb3b3c9d7338ecdb079e3bddc455d46f65f51496b88b399821c364b238.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf9629cb3b3c9d7338ecdb079e3bddc455d46f65f51496b88b399821c364b238.exe
Resource
win10v2004-20220901-en
General
-
Target
bf9629cb3b3c9d7338ecdb079e3bddc455d46f65f51496b88b399821c364b238
-
Size
797KB
-
MD5
92b53c082d6040d04d6423de13c02ec0
-
SHA1
4c66457797375c36eabf56a5bfb5350ad9a054b4
-
SHA256
bf9629cb3b3c9d7338ecdb079e3bddc455d46f65f51496b88b399821c364b238
-
SHA512
4bc023c6019bd95ba7a542b0ba429002fef69837494f8c4f35484d5aa55a09e3829a1a2f8d89743856d8b859e990bdb60bb0b28199a470b7537227ac95564fb8
-
SSDEEP
24576:BoWs1FPZ7ZDIBcG2ds9yOSFk5M/xg8KMCsEVmt:W19ZMcG2dgm/tKPsEG
Malware Config
Signatures
Files
-
bf9629cb3b3c9d7338ecdb079e3bddc455d46f65f51496b88b399821c364b238.exe windows x86
9ababff62d4f43b70ddf2127f41cf5ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventA
CreateDirectoryW
GetFileAttributesW
CloseHandle
VirtualProtectEx
GlobalLock
GetStringTypeA
SetLastError
LocalFlags
GetPrivateProfileSectionA
GetVersionExA
GetCurrentThread
SetCommBreak
GetModuleHandleA
DeviceIoControl
GetFileAttributesW
HeapFree
FindClose
RemoveDirectoryW
GetPrivateProfileIntA
GetCurrentProcess
user32
GrayStringA
LoadCursorW
wsprintfW
SetCursorPos
SetFocus
IsZoomed
DispatchMessageA
IsDialogMessageA
PeekMessageW
GetWindowLongW
GetWindowTextW
IsWindow
PostMessageW
mswsock
getnetbyname
GetAddressByNameA
GetServiceA
GetNameByTypeA
ntshrui
IsPathSharedA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ