Static task
static1
Behavioral task
behavioral1
Sample
bf2846a92d07559fed12f4de6a9354a164c0c4f4411ae08cd5d828ead8175df1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf2846a92d07559fed12f4de6a9354a164c0c4f4411ae08cd5d828ead8175df1.exe
Resource
win10v2004-20220812-en
General
-
Target
bf2846a92d07559fed12f4de6a9354a164c0c4f4411ae08cd5d828ead8175df1
-
Size
700KB
-
MD5
7c154b2dce4064daf9d5930f7fe0ece6
-
SHA1
384ea96bdc324086b609062721e295af74133d50
-
SHA256
bf2846a92d07559fed12f4de6a9354a164c0c4f4411ae08cd5d828ead8175df1
-
SHA512
e66ba0a28c7c33e391645293375f12765c7db8cd59bdff8aedf6236204137d3930f3a1c5e20cdb4eac04a4866b1c13cc022f61940531762b4cc59946fbc11e86
-
SSDEEP
12288:RLp9/KgDfTs37PjH45M0dC8fgWOyvlYVMYN3cLQ1jnvoKqCC2tocBo8rXqyuz:d3DDfK7PjY5M0dChWOhVLRcwnHqCC2tn
Malware Config
Signatures
Files
-
bf2846a92d07559fed12f4de6a9354a164c0c4f4411ae08cd5d828ead8175df1.exe windows x86
a72eaa4cf0d02c9aecccc56c5505e7db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetPixel
CreatePatternBrush
Polygon
SetROP2
DeleteDC
SetTextAlign
EnumFontFamiliesExA
DeleteObject
CreateDCA
Rectangle
PatBlt
RectVisible
GetViewportExtEx
CreateEllipticRgn
SetBkMode
DeleteMetaFile
SetPolyFillMode
SetViewportOrgEx
shell32
ord155
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
kernel32
GetEnvironmentStringsW
SetLastError
GetProcAddress
RtlUnwind
UnhandledExceptionFilter
LoadLibraryA
GetStringTypeW
GetSystemTime
CompareStringA
GetCPInfo
GetCurrentProcess
SetFilePointer
VirtualFree
InterlockedIncrement
CloseHandle
GetStdHandle
InterlockedExchange
CreateMutexW
MultiByteToWideChar
ReadFile
GetModuleFileNameA
HeapReAlloc
GetModuleHandleA
InterlockedDecrement
TlsSetValue
RaiseException
TlsAlloc
GetStartupInfoW
GetEnvironmentStrings
VirtualQuery
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapAlloc
InitializeCriticalSection
GetLocalTime
GetStringTypeA
GetVersion
SetStdHandle
LoadLibraryW
GetStartupInfoA
HeapFree
GetModuleFileNameW
VirtualAlloc
DeleteCriticalSection
WideCharToMultiByte
HeapCreate
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
FlushFileBuffers
GetCommandLineW
GetLastError
GetCommandLineA
EnterCriticalSection
GetModuleHandleW
GetTimeZoneInformation
IsBadCodePtr
TerminateProcess
GetCurrentProcessId
LCMapStringA
LeaveCriticalSection
CompareStringW
ExitProcess
GetFileType
GetTickCount
SetUnhandledExceptionFilter
SetEnvironmentVariableA
SetHandleCount
LCMapStringW
HeapDestroy
WriteFile
comdlg32
ChooseColorW
GetOpenFileNameW
ole32
CoGetClassObject
OleInitialize
CoTaskMemAlloc
OleIsCurrentClipboard
shlwapi
PathIsRelativeW
PathCombineW
PathFindExtensionW
PathStripToRootW
winspool.drv
OpenPrinterA
ClosePrinter
ord204
oleaut32
LoadTypeLi
user32
MessageBoxW
GetKeyboardLayout
SendMessageTimeoutW
LoadIconW
RegisterClassW
GetMenuState
ShowWindow
RegisterClassExW
LoadStringW
LoadBitmapW
DefWindowProcW
DestroyWindow
CreateWindowExW
LoadCursorW
comctl32
ImageList_ReplaceIcon
ord17
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_AddMasked
advapi32
RegQueryValueExA
DeregisterEventSource
GetTokenInformation
OpenServiceA
RegFlushKey
OpenProcessToken
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
ControlService
GetUserNameA
InitializeSecurityDescriptor
RegOpenKeyExA
CreateServiceA
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegDeleteValueA
DeleteService
RegisterEventSourceA
ReportEventA
RegDeleteKeyA
IsValidSid
RegCreateKeyExA
OpenSCManagerA
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ