Static task
static1
Behavioral task
behavioral1
Sample
bf16a0b8e077ccb8b317c89b1a563054b5326baf70aa9b119e5a895ee1f8320f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf16a0b8e077ccb8b317c89b1a563054b5326baf70aa9b119e5a895ee1f8320f.exe
Resource
win10v2004-20221111-en
General
-
Target
bf16a0b8e077ccb8b317c89b1a563054b5326baf70aa9b119e5a895ee1f8320f
-
Size
278KB
-
MD5
d2f9c1ea6f7b510bfeb1bb385f03e40f
-
SHA1
3442a2615335c4a291415fbf26129445e76d0266
-
SHA256
bf16a0b8e077ccb8b317c89b1a563054b5326baf70aa9b119e5a895ee1f8320f
-
SHA512
b93c4bc0ec93d7132444318256972bfaaa1db3cfad353bf4a23002418df6981c65eab5b1949b7b7cc0b66d1c8a3355071362fcfcd514a1ff8cf10ac1b7f49ebf
-
SSDEEP
6144:mWwW92DaFUpWurg/NKF0CcuiHF01l0EawNuz2tgbiT:mWwWmOUpNrxF0TblV5w0um
Malware Config
Signatures
Files
-
bf16a0b8e077ccb8b317c89b1a563054b5326baf70aa9b119e5a895ee1f8320f.exe windows x86
635908878aa24b58230ac4bab842a6bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetLastError
GetCommandLineA
EnterCriticalSection
HeapFree
GetFileAttributesA
SetLastError
CloseHandle
GetFileType
HeapCreate
IsBadReadPtr
GetEnvironmentVariableW
GetFileTime
GetCommandLineW
GetDriveTypeA
SetFileAttributesW
lstrlenA
GlobalSize
GetModuleHandleA
GetCurrentDirectoryW
MapViewOfFile
WaitForMultipleObjects
ExitThread
GlobalLock
FindClose
uxtheme
CloseThemeData
GetThemeTextExtent
CloseThemeData
SetWindowTheme
OpenThemeData
GetThemeColor
GetThemeEnumValue
GetThemeBool
DrawThemeEdge
GetThemeTextMetrics
IsThemeActive
GetWindowTheme
DrawThemeBackground
dispex
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE