Static task
static1
Behavioral task
behavioral1
Sample
bf0c67e552583d6c34a711003d88018125fa45b4cb729238963f45814decb1d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf0c67e552583d6c34a711003d88018125fa45b4cb729238963f45814decb1d8.exe
Resource
win10v2004-20220812-en
General
-
Target
bf0c67e552583d6c34a711003d88018125fa45b4cb729238963f45814decb1d8
-
Size
208KB
-
MD5
4511919c645b66ce1748d3c0b8baed67
-
SHA1
7adb4a1ac7b9eacfc12fb5fdaab03bc8038a800c
-
SHA256
bf0c67e552583d6c34a711003d88018125fa45b4cb729238963f45814decb1d8
-
SHA512
69f7a55c458ba6fa3793abf8c47bb33b87e286b98bac9942531995469a27bfe0fdfa5e717034a63ef91d21a792595a157630216b70b39ced44d55e5132803ea0
-
SSDEEP
3072:U7+U3l+NAtqhuFburcczRx95Ir8KAsSAYzwH8q9o3Zoq:UyUgetHUocNx9AALAstqw
Malware Config
Signatures
Files
-
bf0c67e552583d6c34a711003d88018125fa45b4cb729238963f45814decb1d8.exe windows x86
7bcf6b3f47e12708c18f5c873efc4b96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA
GetCurrentThread
CreateEventA
InitializeCriticalSection
SetEvent
ReleaseSemaphore
CloseHandle
VirtualAlloc
SuspendThread
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
VirtualFree
GlobalFree
Sleep
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
GetSystemInfo
user32
ShowWindow
SendMessageA
LoadIconA
FindWindowA
GetFocus
EnableWindow
PostMessageA
gdi32
CreateSolidBrush
SelectObject
winscard
SCardEstablishContext
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ