Static task
static1
Behavioral task
behavioral1
Sample
bdfe143842f2434fdf4f3af8daacf8f2f6d521bfbf31898d41aecea492a8e655.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdfe143842f2434fdf4f3af8daacf8f2f6d521bfbf31898d41aecea492a8e655.exe
Resource
win10v2004-20221111-en
General
-
Target
bdfe143842f2434fdf4f3af8daacf8f2f6d521bfbf31898d41aecea492a8e655
-
Size
40KB
-
MD5
06376a35264e637cea2fed29e6cace20
-
SHA1
5f2665722acf8fe28b0b745d0328cb464852920d
-
SHA256
bdfe143842f2434fdf4f3af8daacf8f2f6d521bfbf31898d41aecea492a8e655
-
SHA512
6243ac1deb92a6639993e9a74fee434384610f1900be6ea7d8b382fdf6b39ec9068fcab3d9ce008abc7f9cc5cd5ae9063e0ebdc311ae5d73bb196dc81d6cf847
-
SSDEEP
768:5yp66ORhz1G7QPZwnmiZOq2cYqahagE7SIjN/UDR2:5k66sEMamiZIJq8EusNq2
Malware Config
Signatures
Files
-
bdfe143842f2434fdf4f3af8daacf8f2f6d521bfbf31898d41aecea492a8e655.exe windows x86
2d78e4640257f4feec0e3e93794e917d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
ShowWindow
SetTimer
SetForegroundWindow
SetCursorPos
SendNotifyMessageA
SendMessageA
RegisterClassExA
PostQuitMessage
PeekMessageA
MoveWindow
ModifyMenuA
MessageBoxA
keybd_event
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
InsertMenuItemA
GetWindowRect
GetSystemMenu
GetSubMenu
GetParent
GetMessageA
GetMenuStringA
MapWindowPoints
GetMenuItemID
GetMenuItemCount
GetMenu
GetCursorPos
GetClassNameA
EnumWindows
EnumChildWindows
EnableWindow
EnableMenuItem
DrawMenuBar
DispatchMessageA
DefWindowProcA
CreateWindowExA
kernel32
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
WriteProcessMemory
WriteFile
VirtualProtectEx
VirtualFree
VirtualAlloc
TerminateProcess
SystemTimeToFileTime
SetPriorityClass
SetLocalTime
SetFileTime
SetFilePointer
SetFileAttributesA
SetEndOfFile
SetCurrentDirectoryA
ResumeThread
ReadProcessMemory
ReadFile
LocalUnlock
LocalLock
LocalFree
LocalFileTimeToFileTime
LocalAlloc
GetVersionExA
GetTickCount
GetModuleHandleA
GetModuleFileNameA
CloseHandle
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
GetCurrentProcess
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileTime
GetLastError
GetLocalTime
shell32
ShellExecuteExA
gdi32
DeleteObject
advapi32
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE