Static task
static1
Behavioral task
behavioral1
Sample
bf3a2caa44d13e727b756a5080f89759c1839eb027f1991a94fc02fbf3804703.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf3a2caa44d13e727b756a5080f89759c1839eb027f1991a94fc02fbf3804703.exe
Resource
win10v2004-20220812-en
General
-
Target
bf3a2caa44d13e727b756a5080f89759c1839eb027f1991a94fc02fbf3804703
-
Size
667KB
-
MD5
b5af0165196d3cc8b8f5be3e152361f7
-
SHA1
d661cbf68e38e84c4cb143815344a8b1955425d7
-
SHA256
bf3a2caa44d13e727b756a5080f89759c1839eb027f1991a94fc02fbf3804703
-
SHA512
8f9d7624710f0930059edd699c3ac50d1d9c968559e7946c5ec731141d8cc4f86e9da12f56f100d27d98aa7cd85668457aaae75eb42d21fafb95f9755e5d4509
-
SSDEEP
12288:SwMl3LNViyWr5LNy7ArQ8x0TG/mrc7PEfCNFO9jsNgPiHV1kG:XM5LNVK5Rykz0TdEEfCfFDHV
Malware Config
Signatures
Files
-
bf3a2caa44d13e727b756a5080f89759c1839eb027f1991a94fc02fbf3804703.exe windows x86
df59ca6e831f5dbf2bd2673d96e90696
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
IsProcessorFeaturePresent
GetPrivateProfileSectionNamesW
user32
DialogBoxParamW
FrameRect
DrawTextW
GetDlgItemTextW
BeginPaint
GetMessageW
LoadAcceleratorsW
IsZoomed
MessageBoxW
ReleaseDC
InvalidateRect
GetSystemMetrics
CheckDlgButton
LoadIconW
IntersectRect
SendMessageW
ReleaseCapture
TranslateAcceleratorW
MoveWindow
InvertRect
OffsetRect
PostMessageW
GetWindowPlacement
GetSubMenu
FillRect
DispatchMessageW
WinHelpW
SetDlgItemTextW
RegisterClassW
GetDC
DefWindowProcW
CreateWindowExW
EndDialog
DestroyWindow
PeekMessageW
ShowWindow
GetClientRect
GetMenu
GetWindowRect
GetDlgItem
wsprintfW
GetDesktopWindow
LoadCursorW
WaitMessage
CheckRadioButton
IsDlgButtonChecked
UnionRect
EndPaint
GetForegroundWindow
PtInRect
UpdateWindow
SetRect
DrawMenuBar
SetCapture
LoadBitmapW
EnableMenuItem
iphlpapi
InternalGetIpForwardTable
imm32
ImmSetHotKey
comctl32
InitCommonControlsEx
Sections
.text Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 207KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ