Static task
static1
Behavioral task
behavioral1
Sample
bf623292d2912f19ba75732fdc6ea1cce07af85a961d650735385150eb08a10a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf623292d2912f19ba75732fdc6ea1cce07af85a961d650735385150eb08a10a.exe
Resource
win10v2004-20220812-en
General
-
Target
bf623292d2912f19ba75732fdc6ea1cce07af85a961d650735385150eb08a10a
-
Size
304KB
-
MD5
1da7fc5e9a213e93ffdd6d2bebf0e6de
-
SHA1
b3241f24466430cea510ea5985c428e4fcfb17c4
-
SHA256
bf623292d2912f19ba75732fdc6ea1cce07af85a961d650735385150eb08a10a
-
SHA512
7eb50061195bfa3d27674c913cb6a080eddb935d956783388aefc6324d338fcb446df62d1b22de3ffbf6e2e78b13dfc1b97bf7c9a1f16d5f8a21afa8ce72aafc
-
SSDEEP
6144:H9+hxXKTBKVdnEextvqv/gPXblGFx+9EgBkUO:d+3oKH1nvqngPY82Y
Malware Config
Signatures
Files
-
bf623292d2912f19ba75732fdc6ea1cce07af85a961d650735385150eb08a10a.exe windows x86
b9502576fd3e7d5b7fcb73ce799793fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FindVolumeClose
GetACP
GetEnvironmentVariableW
GetStdHandle
ResetEvent
GetModuleHandleW
ResumeThread
GlobalSize
VirtualAlloc
GlobalFree
CreateMutexA
LocalFree
GetCommandLineA
InterlockedExchange
lstrlenA
GetExitCodeProcess
WriteFile
CreateEventA
GetPrivateProfileIntW
advapi32
CreateServiceA
ClearEventLogA
RegDeleteKeyA
RegDeleteValueA
CloseEventLog
IsValidSid
RegCreateKeyExW
IsValidAcl
RegEnumKeyW
RegQueryValueW
IsTextUnicode
RegCloseKey
ControlService
amstream
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ