Static task
static1
Behavioral task
behavioral1
Sample
bfaa0f2f214db4f185d4410a4980bb7d42dcc388cad7062cee3df84e42aca186.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfaa0f2f214db4f185d4410a4980bb7d42dcc388cad7062cee3df84e42aca186.exe
Resource
win10v2004-20220812-en
General
-
Target
bfaa0f2f214db4f185d4410a4980bb7d42dcc388cad7062cee3df84e42aca186
-
Size
27KB
-
MD5
a26451a9288c9e025945e6d928e5aea0
-
SHA1
652bf4392fc5fb135e328122037b050196c05747
-
SHA256
bfaa0f2f214db4f185d4410a4980bb7d42dcc388cad7062cee3df84e42aca186
-
SHA512
d6a45ccd6a80ed9a911c90a78b478651f870306a8fee007685aaa282f58a1c7ec190a7852c4a97d5b4e0286633ace0536d6ff900e89a338c0bc48347cd51c242
-
SSDEEP
384:zu1fyPGzJ9h/6aAAKqRwgWX1kWiYyJatsM1yU4Xi9TAp6:s6ERmwNatsE0WAp6
Malware Config
Signatures
Files
-
bfaa0f2f214db4f185d4410a4980bb7d42dcc388cad7062cee3df84e42aca186.exe windows x86
2f0ce985d06e786fa194a8b2bdb24c15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr70
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_cexit
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
printf
_XcptFilter
_exit
_c_exit
_wcsicmp
wprintf
__p__fmode
kernel32
LocalFree
GetModuleHandleA
ole32
CoUninitialize
CoInitializeEx
aspnet_isapi
RegisterISAPIEx
RegisterISAPI
ListAspnetInstalledVersions
ListAspnetInstalledIISKeys
ValidateIISPath
RemoveAspnetFromIISKey
RemoveClientScriptFiles
CopyClientScriptFiles
GetExistingVersion
UnregisterISAPI
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE