?BreadA@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
bf773eb1db8c63f83db25eb5bcd63cdf4cd09c851f65af93c81a3c2bec042288.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf773eb1db8c63f83db25eb5bcd63cdf4cd09c851f65af93c81a3c2bec042288.exe
Resource
win10v2004-20221111-en
General
-
Target
bf773eb1db8c63f83db25eb5bcd63cdf4cd09c851f65af93c81a3c2bec042288
-
Size
155KB
-
MD5
a70191ad7468a4811c9e64b92ea76936
-
SHA1
00dccd4cb92aa798f92b0d844b7be57fa533c8fb
-
SHA256
bf773eb1db8c63f83db25eb5bcd63cdf4cd09c851f65af93c81a3c2bec042288
-
SHA512
feff330861651bf8486e0588114326ede80d7d0a4474d1ceadfccb86e06f3bf96db3e4294f35b8ac81f2f2ed9271acfb3904ea2811bfb19c7c65d5e1a9e62b44
-
SSDEEP
3072:wrUNp3J/kffuaoU1H9Yubi1bKonSXgpByiX1I/KqwAnirPRs0F0:GU33JUuV0bi1bKuSXgpUQUKqKrpnF
Malware Config
Signatures
Files
-
bf773eb1db8c63f83db25eb5bcd63cdf4cd09c851f65af93c81a3c2bec042288.exe windows x86
d2e944b3a9f0312c0b1a443f09af3b64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
GetSaveFileNameW
kernel32
ConnectNamedPipe
ReadFile
GlobalCompact
GlobalDeleteAtom
TryEnterCriticalSection
IsValidLanguageGroup
InitializeCriticalSection
EnumResourceLanguagesA
LocalUnlock
lstrcpyW
GetAtomNameW
FlushFileBuffers
GetSystemWindowsDirectoryA
GlobalAddAtomW
OpenFileMappingA
GetTimeZoneInformation
GetFileAttributesExA
OpenFileMappingW
GlobalLock
GetCurrentDirectoryW
FindResourceExW
SetSystemTimeAdjustment
GetLocaleInfoA
RtlUnwind
GetWindowsDirectoryW
user32
GetActiveWindow
InvalidateRgn
IsCharUpperW
GetDesktopWindow
GetForegroundWindow
Exports
Exports
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ