Static task
static1
Behavioral task
behavioral1
Sample
bf103cfb189debaddb3b17af18489fd590b3a65c90499b36fb3fa67153c88209.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf103cfb189debaddb3b17af18489fd590b3a65c90499b36fb3fa67153c88209.exe
Resource
win10v2004-20220812-en
General
-
Target
bf103cfb189debaddb3b17af18489fd590b3a65c90499b36fb3fa67153c88209
-
Size
138KB
-
MD5
7f98bdeb2309dd76f2e7098816219823
-
SHA1
da26700c14d934b20069fa316801245e28a31332
-
SHA256
bf103cfb189debaddb3b17af18489fd590b3a65c90499b36fb3fa67153c88209
-
SHA512
29c76c9122cb3cbff24fac9c607fd2d4d253e666ae7ab2c6a9b01a8921e70a478bb81d056f64fbaea51b9734ff71822aae7fc1c5844b64ac382c19457e850789
-
SSDEEP
3072:yarJpYdfElw8DajZIzwROjV4Jvub5hGiEhV8/:yarHGAw8UvOjeJUw9S
Malware Config
Signatures
Files
-
bf103cfb189debaddb3b17af18489fd590b3a65c90499b36fb3fa67153c88209.exe windows x86
5be4deea3f8f087dcdbe977f61e72192
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetLocaleInfoW
GetModuleHandleA
msvcrt
calloc
_adjust_fdiv
_wfindfirst64
_dup
fwprintf
_heapmin
_getmaxstdio
_spawnlpe
_mbccpy
_fmode
_adj_fdivr_m32
_mbcjmstojis
freopen
strcspn
gets
_ui64tow
iswctype
_tzname
_XcptFilter
__p__commode
printf
_acmdln
iswcntrl
_exit
_execv
_adj_fdiv_m32i
_initterm
_controlfp
_winmajor
_except_handler3
__getmainargs
_wsearchenv
tmpnam
__set_app_type
_wtoi
iswdigit
_mbsnbcmp
exit
_wperror
_wremove
_adj_fprem1
_isctype
_mbscspn
_getws
_beep
strcat
wcscmp
fputs
_purecall
abort
is_wctype
memcpy
_wrename
__setusermatherr
_wexecvp
__p__fmode
_mbstok
_mbsnbicmp
_stat
fputws
wcstombs
_utime64
_memccpy
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ