Static task
static1
Behavioral task
behavioral1
Sample
bf786150d04e82049d1ac4aa1d741a25824d0506468eee6d887fd1a285e6a4b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf786150d04e82049d1ac4aa1d741a25824d0506468eee6d887fd1a285e6a4b2.exe
Resource
win10v2004-20220812-en
General
-
Target
bf786150d04e82049d1ac4aa1d741a25824d0506468eee6d887fd1a285e6a4b2
-
Size
301KB
-
MD5
0a2be5c5713c02397ce1df9abe5342f0
-
SHA1
8484b2af5842b8743377ea7b9ad4f82787522f8a
-
SHA256
bf786150d04e82049d1ac4aa1d741a25824d0506468eee6d887fd1a285e6a4b2
-
SHA512
e022c95b32789198bf4b12bf8888d9fa86c414e71902a310b8585568400b39c50b8e5d59d3dfbe03a86b6086153278e9c271bb8bf1cb90f22f0fff077494ffa6
-
SSDEEP
6144:+4sJ6zam9JIwVabFueeISGIZRBxTfDjSyqoYksqDH6WL0xtlnNzB:IjmqbWgIZD1SJKfShnNN
Malware Config
Signatures
Files
-
bf786150d04e82049d1ac4aa1d741a25824d0506468eee6d887fd1a285e6a4b2.exe windows x86
45fb576b4e16427a73acd13e0e6e9f9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
WriteFile
GetFileAttributesA
GetProcessHeap
CancelIo
HeapSize
VirtualProtect
ReleaseMutex
GetCommandLineA
RemoveDirectoryA
SetLastError
IsBadWritePtr
MapViewOfFile
CreateDirectoryA
GetStdHandle
DeleteFileA
GetDriveTypeW
CreateMailslotA
GetLocaleInfoA
SetLocalTime
ResetEvent
user32
DispatchMessageA
PeekMessageA
DestroyMenu
SetFocus
PostMessageW
GetCaretPos
SetCursor
GetWindowLongW
wsprintfA
GetCapture
LoadImageA
GetWindowTextW
LoadCursorA
filemgmt
DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ