Static task
static1
Behavioral task
behavioral1
Sample
bf90004db5d92da7653432ec34cddb7192efce407bdfe4aa6a7f0ff191a480ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf90004db5d92da7653432ec34cddb7192efce407bdfe4aa6a7f0ff191a480ad.exe
Resource
win10v2004-20220812-en
General
-
Target
bf90004db5d92da7653432ec34cddb7192efce407bdfe4aa6a7f0ff191a480ad
-
Size
832KB
-
MD5
488516d4b19bdc3626e9def6f72fcbe8
-
SHA1
445ced95446470ca3ef2ca17cb5d3d7a8c8f2536
-
SHA256
bf90004db5d92da7653432ec34cddb7192efce407bdfe4aa6a7f0ff191a480ad
-
SHA512
f60108cfc4848f52e1e5de1ebdd8a2f2be97a25a4e7d1fa0a22475df2e9431bea47dc12abd048d1b84d45daa26de9c9f40efae514512f4a9ebdabfff0a3d7e75
-
SSDEEP
24576:VdyNF1m1bVrZJ2VEiCsA0AaFns54VSg+0xO:eH1mBXARhAXMs+VS6x
Malware Config
Signatures
Files
-
bf90004db5d92da7653432ec34cddb7192efce407bdfe4aa6a7f0ff191a480ad.exe windows x86
d7ea609f5897f76c87539bddfe7c9bfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
InitializeCriticalSectionAndSpinCount
MapViewOfFile
EnterCriticalSection
GetConsoleMode
DeleteCriticalSection
GlobalFix
ExitProcess
GetTimeFormatA
WideCharToMultiByte
InterlockedDecrement
SetEnvironmentVariableA
GetModuleHandleA
FlushConsoleInputBuffer
GetProcessShutdownParameters
GetSystemDirectoryW
GetTempPathA
GetFileType
IsValidCodePage
GetCPInfo
GetCurrentThreadId
LoadLibraryA
GetCurrencyFormatW
InterlockedIncrement
HeapFree
HeapAlloc
GetProcAddress
GetNamedPipeHandleStateA
FreeResource
SystemTimeToFileTime
GetStringTypeExW
QueryPerformanceCounter
GetConsoleCP
LocalHandle
LCMapStringW
FreeEnvironmentStringsA
HeapReAlloc
GetEnvironmentStrings
GetLocaleInfoA
GetLastError
TerminateProcess
GetACP
FreeLibrary
EnumDateFormatsExA
LocalAlloc
CreateDirectoryA
HeapCreate
GetCalendarInfoW
UnmapViewOfFile
FindClose
WritePrivateProfileSectionA
EnumSystemLocalesW
GetStringTypeW
CommConfigDialogW
SetHandleCount
WriteConsoleW
GetCommandLineA
VirtualFree
MultiByteToWideChar
GetStringTypeA
VirtualAlloc
HeapSize
TlsAlloc
GetPrivateProfileSectionNamesW
InterlockedExchange
HeapDestroy
TlsFree
GetStdHandle
TlsGetValue
CreateMutexA
GetLocaleInfoW
GetTimeZoneInformation
GetOEMCP
GetCurrentProcessId
SetFilePointer
WriteProfileStringW
OpenMutexA
ReadFile
GetModuleFileNameA
SetLastError
GetTempFileNameW
VirtualQuery
CompareStringW
GetProfileSectionA
GetStartupInfoA
CompareStringA
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
WriteFile
IsDebuggerPresent
SetStdHandle
GetProfileStringW
UnhandledExceptionFilter
lstrcmpiW
Sleep
FlushInstructionCache
GetModuleHandleW
GetPrivateProfileSectionA
GetCurrentProcess
GetFileAttributesW
CreateEventA
GetSystemTimeAsFileTime
CreateFileMappingA
GetConsoleOutputCP
SetConsoleCtrlHandler
WriteConsoleOutputCharacterW
LeaveCriticalSection
SetUnhandledExceptionFilter
WriteConsoleOutputAttribute
TlsSetValue
WriteConsoleA
OutputDebugStringW
SetConsoleCursorInfo
FreeEnvironmentStringsW
GetDateFormatA
LCMapStringA
GetUserDefaultLCID
FlushFileBuffers
MoveFileExW
CloseHandle
GetTickCount
RtlUnwind
GetPrivateProfileSectionW
VirtualQueryEx
GetComputerNameW
CreateFileA
comctl32
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_SetDragCursorImage
InitCommonControlsEx
CreatePropertySheetPageW
user32
MessageBoxA
CreateWindowExA
SubtractRect
DefWindowProcA
CreateWindowStationW
CopyAcceleratorTableA
CharToOemBuffW
GetDlgItemTextA
DdeImpersonateClient
ToAsciiEx
LoadMenuA
DdeSetUserHandle
LoadImageW
ShowWindow
ChangeDisplaySettingsA
GetWindowRgn
LoadBitmapW
ChangeDisplaySettingsExA
UnregisterDeviceNotification
RegisterClassExA
DefFrameProcW
RedrawWindow
RegisterClassA
DdeKeepStringHandle
GetMenuItemCount
DestroyWindow
PeekMessageW
OffsetRect
GetInputState
MoveWindow
GetDialogBaseUnits
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ