Static task
static1
Behavioral task
behavioral1
Sample
bf5205c40234d0e1857a6f5125ecf7004dc11a33ca1077bc776e30bb18c82f40.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf5205c40234d0e1857a6f5125ecf7004dc11a33ca1077bc776e30bb18c82f40.exe
Resource
win10v2004-20221111-en
General
-
Target
bf5205c40234d0e1857a6f5125ecf7004dc11a33ca1077bc776e30bb18c82f40
-
Size
1.3MB
-
MD5
88ea7c17e32805cd9e1298be7e3050ac
-
SHA1
72e3b7c86bb1dbc6bf6ee4748141ea00487ffdf8
-
SHA256
bf5205c40234d0e1857a6f5125ecf7004dc11a33ca1077bc776e30bb18c82f40
-
SHA512
273f022987c3dcd5bdcfe68878ed67bd04253b4f765676eba463b023a0f5f77072c5fc258cf8c3ab74be5ca0401076c03f8ab0ecfa6b0e4cb124eaf62a184aa3
-
SSDEEP
24576:LZKoj1rhq3aTmN0RrC/8ECoW2bVFLH+lYPkXXP0lgSj0tykOcBrA8:LZPxogrrC/HCubVFLH+KPWP0BUBrA
Malware Config
Signatures
Files
-
bf5205c40234d0e1857a6f5125ecf7004dc11a33ca1077bc776e30bb18c82f40.exe windows x86
1b09158213378a59be68341a24938b1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
SetLastError
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
IsChild
gdi32
EndPage
winmm
waveOutGetNumDevs
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_Read
ws2_32
inet_ntoa
wininet
InternetCloseHandle
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 586KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jwxx0 Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jwxx1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ