Static task
static1
Behavioral task
behavioral1
Sample
baf68c00253dba32db6ddea4940367cd4c7e2363020d6030f711b5180e6cb92c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
baf68c00253dba32db6ddea4940367cd4c7e2363020d6030f711b5180e6cb92c.exe
Resource
win10v2004-20220812-en
General
-
Target
baf68c00253dba32db6ddea4940367cd4c7e2363020d6030f711b5180e6cb92c
-
Size
132KB
-
MD5
190a22e344558b29a840cb2a806bff6e
-
SHA1
ded867e0a759d7c967d6f4174830f174365e99ef
-
SHA256
baf68c00253dba32db6ddea4940367cd4c7e2363020d6030f711b5180e6cb92c
-
SHA512
e11dd8162668bd17aa80028c3d262391bcd9a5ed980ed05f196644db5137b70b9d4a0bfc2fd108c38d72b941c96642f662335731aee676271bd8aaa688f30b54
-
SSDEEP
3072:+3bIpdK5VDK0JbXX7R7WxnqwnWdM+nOuOoiB:+3cYvJbNWZWdMOmoiB
Malware Config
Signatures
Files
-
baf68c00253dba32db6ddea4940367cd4c7e2363020d6030f711b5180e6cb92c.exe windows x86
4c1ca7fc217190edd2f906491b79874b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleFileNameA
GetCommandLineA
GetDateFormatA
GetCommandLineA
HeapAlloc
GetCommandLineA
GetFileSize
GetCommandLineA
lstrcpynA
GetCommandLineA
lstrcmpiA
GetCommandLineA
lstrcatA
GetCommandLineA
GetModuleHandleA
GetCommandLineA
user32
InsertMenuA
AppendMenuA
IsMenu
DrawIcon
GetMenu
CalcMenuBar
CloseWindow
CreateIcon
GetFocus
GetDC
IsWindow
BlockInput
AlignRects
DialogBoxParamA
EndDialog
DrawTextA
CopyRect
GetCursor
AppendMenuW
DialogBoxParamW
CopyImage
LoadMenuA
GetWindowTextA
GetDlgItem
GetWindowTextLengthA
DrawTextW
CopyIcon
LoadCursorA
DrawIconEx
advapi32
RegLoadKeyW
RegReplaceKeyW
RegEnumValueW
RegDeleteValueA
RegQueryValueExA
RegQueryInfoKeyA
RegCreateKeyExW
RegQueryValueW
RegQueryValueExW
RegEnumKeyExA
RegDeleteValueW
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteKeyW
RegGetKeySecurity
RegQueryValueA
RegCreateKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyA
RegReplaceKeyA
RegFlushKey
RegOpenKeyA
RegEnumKeyW
RegOpenKeyW
RegLoadKeyA
RegEnumKeyA
RegEnumValueA
RegFlushKey
RegCreateKeyW
RegQueryInfoKeyW
RegEnumKeyA
RegReplaceKeyA
RegDeleteKeyW
RegQueryValueA
RegQueryValueW
RegQueryValueExA
RegEnumValueW
RegOpenKeyExW
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyW
RegEnumKeyW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegLoadKeyW
RegReplaceKeyW
RegQueryValueExW
RegLoadKeyA
RegGetKeySecurity
RegOpenKeyA
RegEnumValueA
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r3a7a Size: 6KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r21c Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_READ