?MyDataFunc@@YGKXZ
Static task
static1
Behavioral task
behavioral1
Sample
bfb44a3ad0b50b7f33bf07e0535e0bf12fb2131c3f4920c4b5acae084e7ab302.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfb44a3ad0b50b7f33bf07e0535e0bf12fb2131c3f4920c4b5acae084e7ab302.exe
Resource
win10v2004-20220901-en
General
-
Target
bfb44a3ad0b50b7f33bf07e0535e0bf12fb2131c3f4920c4b5acae084e7ab302
-
Size
169KB
-
MD5
70151c88ee09b36229c0a7877de87ac1
-
SHA1
ba4447853f7cdc6fe131f71d056038994dae2b76
-
SHA256
bfb44a3ad0b50b7f33bf07e0535e0bf12fb2131c3f4920c4b5acae084e7ab302
-
SHA512
70fceeba8b78f477a058e98bddcdd6675e2463207731a6686beb3c6af77263e91b8cc2cbd5388fdf1bd16006c51b4d1aa086b7dc29066eed0761a2e3d47ce94b
-
SSDEEP
3072:J6KDKbopACh8iOaR7+4Ju2d2HRjxh674HPsVwVoVNReuDjVA4Q:J6KGUp0iOak120jxhrYwVMVBA4
Malware Config
Signatures
Files
-
bfb44a3ad0b50b7f33bf07e0535e0bf12fb2131c3f4920c4b5acae084e7ab302.exe windows x86
8eea18f0cca5915b19ea80783d51c92a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemWindowsDirectoryW
IsBadWritePtr
SetupComm
GetStringTypeExW
GetShortPathNameW
GetModuleHandleW
GetProfileIntA
ClearCommBreak
MoveFileA
GetProfileStringA
ConnectNamedPipe
shlwapi
PathUnquoteSpacesA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
MessageBoxA
gdi32
AddFontResourceW
FillRgn
CreateRectRgn
DeleteObject
Exports
Exports
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug01 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ