Static task
static1
Behavioral task
behavioral1
Sample
bfa10cfcba35b79b542403b24d4b1cc6db3ab1db21175d3680d49d74157aa260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfa10cfcba35b79b542403b24d4b1cc6db3ab1db21175d3680d49d74157aa260.exe
Resource
win10v2004-20221111-en
General
-
Target
bfa10cfcba35b79b542403b24d4b1cc6db3ab1db21175d3680d49d74157aa260
-
Size
32KB
-
MD5
11ec26406bc4cb81c1bcc4bdadb6cc00
-
SHA1
1738c28e220c72454575ef2a7b3baf0e31a7f832
-
SHA256
bfa10cfcba35b79b542403b24d4b1cc6db3ab1db21175d3680d49d74157aa260
-
SHA512
987af719c78f566c626232bd4de22db2d3f634422258d0b7a8b225ac3a94054b529c31b274199dde8e1abc6839ffdfa86a8b7554f8164503f236d91806d42735
-
SSDEEP
768:mdVtjfXkTQ5yav2GheckdEBY2kBhTcPw8OamMUt3UBn9:m/t/yabVPBYZBtc4erUtkB9
Malware Config
Signatures
Files
-
bfa10cfcba35b79b542403b24d4b1cc6db3ab1db21175d3680d49d74157aa260.exe windows x86
f92559edfa1db136be6cf760556a76a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
GetCommandLineA
GetVersion
GetModuleHandleA
LoadLibraryA
FindResourceExA
MapViewOfFileEx
GetAtomNameW
ReadFileScatter
FindFirstFileExW
CallNamedPipeW
msvcrt
strcpy
__mb_cur_max
strstr
wcscmp
strlen
realloc
abs
_fullpath
_strcmpi
_XcptFilter
strncmp
memset
_wtoi
_itoa
malloc
_wcsicmp
_chdir
_vsnprintf
__p__fmode
iswctype
wcscat
memcpy
_waccess
wcscpy
wcsstr
_wsplitpath
__setusermatherr
_wfopen
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.int Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ