Static task
static1
Behavioral task
behavioral1
Sample
bf22deadd5602aaf1ae243d5e70ee64e1ca18f3fc2204a029a97c1a315f6eadd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf22deadd5602aaf1ae243d5e70ee64e1ca18f3fc2204a029a97c1a315f6eadd.exe
Resource
win10v2004-20220812-en
General
-
Target
bf22deadd5602aaf1ae243d5e70ee64e1ca18f3fc2204a029a97c1a315f6eadd
-
Size
694KB
-
MD5
5302b8bf1e5aae1054a12e95fa22e061
-
SHA1
1763297bafda9b0107a78eb3d257a241952157ec
-
SHA256
bf22deadd5602aaf1ae243d5e70ee64e1ca18f3fc2204a029a97c1a315f6eadd
-
SHA512
5fd7aabfd6612ec2cecdc42f50f715b72343fd94a82304c4ff504337fa38888ed24d063cba01e5491108dbce694dc49e4c9d71962ee0d9a112ba22783fd0bf37
-
SSDEEP
12288:DfXx+OzxeNDQ7loyZMEDPbQU5ScYjDeaKjaH22raxnLUjx3buQR7ybyi:rxdxoQRoyGeS3epjaH22O1UjVflTi
Malware Config
Signatures
Files
-
bf22deadd5602aaf1ae243d5e70ee64e1ca18f3fc2204a029a97c1a315f6eadd.exe windows x86
8c5d4fee3ff920df3e69a240c1b7a4b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
SetWindowPos
SetCapture
ReleaseCapture
GetDC
ReleaseDC
SetTimer
GetDesktopWindow
EnableWindow
SetCursor
kernel32
CloseHandle
LoadResource
HeapFree
GetStdHandle
EnterCriticalSection
LCMapStringW
lstrlenW
SetHandleCount
FileTimeToSystemTime
FindResourceA
GetModuleFileNameW
GetCurrentProcessId
GetTickCount
GetVersion
GetModuleHandleA
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
GetLastError
ExitProcess
VirtualAlloc
LeaveCriticalSection
SetLastError
LocalAlloc
CreateFileA
SetEndOfFile
FormatMessageA
Sleep
InterlockedIncrement
FindClose
GlobalAlloc
HeapCreate
InitializeCriticalSection
GetCurrentProcess
WriteConsoleA
CreateProcessA
TerminateProcess
GetProcAddress
GetStringTypeW
GetACP
GetSystemTimeAsFileTime
TlsSetValue
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetFileAttributesA
WideCharToMultiByte
RaiseException
SetFilePointer
GlobalLock
FreeEnvironmentStringsW
SetStdHandle
SetErrorMode
UnhandledExceptionFilter
GetCPInfo
GetCommandLineW
GetLocaleInfoA
GetCurrentDirectoryA
SizeofResource
CreateThread
GetStartupInfoA
FreeEnvironmentStringsA
LoadLibraryA
DeleteFileA
GetModuleFileNameA
GetVersionExA
VirtualProtect
TlsAlloc
GetThreadLocale
QueryPerformanceCounter
GlobalFree
Sections
.text Size: 648KB - Virtual size: 974KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ