Static task
static1
Behavioral task
behavioral1
Sample
bfa229c6ca130c8123ff4b27120094845e0adc9f4dcfc490f7e08a4c6a554d36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfa229c6ca130c8123ff4b27120094845e0adc9f4dcfc490f7e08a4c6a554d36.exe
Resource
win10v2004-20220812-en
General
-
Target
bfa229c6ca130c8123ff4b27120094845e0adc9f4dcfc490f7e08a4c6a554d36
-
Size
65KB
-
MD5
475667dde3e6d4efb3a3054aa5acf1a5
-
SHA1
a699544920d09e924d39866f3dba6bc7fc9960b2
-
SHA256
bfa229c6ca130c8123ff4b27120094845e0adc9f4dcfc490f7e08a4c6a554d36
-
SHA512
109eca4645ee9e7aa2ae20d4d066cf4f6c16aa8742ffa0d60421d4122160d72779da7682041bfdf41b7984063fc2d90a55972c2deb9cab87380183d851ac3eb6
-
SSDEEP
1536:vJ6vQFZ7Fxqlq+MLMRqyBpEJY9wee7j9rKXWI:v4v2ZFxqMFyBpf9weev9rwn
Malware Config
Signatures
Files
-
bfa229c6ca130c8123ff4b27120094845e0adc9f4dcfc490f7e08a4c6a554d36.exe windows x86
8ad7e1bb4e03663aea96bcf504aa6d25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GlobalUnlock
ReleaseMutex
LoadLibraryExA
GetModuleHandleA
lstrlenW
GetEnvironmentVariableA
UnmapViewOfFile
GetCurrentThreadId
CloseHandle
GetExitCodeProcess
HeapCreate
GetStdHandle
CreateFileW
FindResourceW
TlsGetValue
SetLastError
GlobalFree
CreateMutexA
lstrcpyA
user32
CheckRadioButton
GetDlgItem
GetCaretPos
CreateWindowExA
CallWindowProcA
IsWindow
GetDC
DispatchMessageA
DrawMenuBar
DrawEdge
FillRect
CreateMenu
SetFocus
rsaenh
CPDeriveKey
CPGenKey
CPHashData
CPSignHash
CPDecrypt
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wcizoko Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE