Static task
static1
Behavioral task
behavioral1
Sample
bfb021cb56159e7bdd26717c336adc9c023959db19c74fd5dfa4f5629f5924b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfb021cb56159e7bdd26717c336adc9c023959db19c74fd5dfa4f5629f5924b8.exe
Resource
win10v2004-20221111-en
General
-
Target
bfb021cb56159e7bdd26717c336adc9c023959db19c74fd5dfa4f5629f5924b8
-
Size
144KB
-
MD5
35b100d27715035e45d3a2c48e4e402d
-
SHA1
9cec6d488cd9e57a7ec9cb7edbea5472eb85b338
-
SHA256
bfb021cb56159e7bdd26717c336adc9c023959db19c74fd5dfa4f5629f5924b8
-
SHA512
4164ffe878f6d81ce9a63575edbc19b3bc90cf3184f9170e69e627c9c0cab81e914bc1601a67648192f09760d682e835044a606e1f9efab175b4e51d3e972a7c
-
SSDEEP
1536:wbq7elsRRQIFFdpkll9i9Y92MDnU0Mjji:mq7qsnFaVEaei
Malware Config
Signatures
Files
-
bfb021cb56159e7bdd26717c336adc9c023959db19c74fd5dfa4f5629f5924b8.exe windows x86
a5ead195f35d796c48a0d814d26cfdd0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
LocalAlloc
GetCurrentProcess
GetProcAddress
GetStartupInfoA
LoadLibraryW
WideCharToMultiByte
TerminateProcess
GetACP
HeapDestroy
ReadFile
GetACP
SetFilePointer
LeaveCriticalSection
TerminateProcess
lstrcpyW
LoadLibraryW
GetCurrentThreadId
Sleep
LoadLibraryA
WriteFile
LoadLibraryW
SetEvent
HeapAlloc
GetProcAddress
CreateFileW
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentThreadId
SetLastError
GetCommandLineA
GetProcessHeap
InitializeCriticalSection
SetEvent
VirtualFree
LoadLibraryW
GetSystemTimeAsFileTime
GetLastError
MultiByteToWideChar
HeapAlloc
WriteFile
VirtualAlloc
LocalFree
GetCurrentProcessId
Sections
.hthe Size: 133KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sqix Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdfr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jvhm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ohhd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jwdn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ryyt Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uchu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qroc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE