Static task
static1
Behavioral task
behavioral1
Sample
bfd1a332243f72a746670052974359d904bafae0a31aae08b13e4130953d6a38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfd1a332243f72a746670052974359d904bafae0a31aae08b13e4130953d6a38.exe
Resource
win10v2004-20221111-en
General
-
Target
bfd1a332243f72a746670052974359d904bafae0a31aae08b13e4130953d6a38
-
Size
895KB
-
MD5
738be518ea8e6d4e308e7553a8beec87
-
SHA1
3c97f53a5fc3edc7589d8e086a3ba82af92535f7
-
SHA256
bfd1a332243f72a746670052974359d904bafae0a31aae08b13e4130953d6a38
-
SHA512
b19958aa2f435cf625ee138e192e0f27ee03fc2a0798338d88ffc35f3a8e0558f32f0e1b6c0b34d9bdf4330913740d8f4ec8b90bc8d92847b3c3bf799d81f703
-
SSDEEP
24576:PrVBFWOURC5QAkYQXXbcufV0ggej3GkpLf34:z3UUCHbnYufndj3G2LP4
Malware Config
Signatures
Files
-
bfd1a332243f72a746670052974359d904bafae0a31aae08b13e4130953d6a38.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DexCrypt Size: 60B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DexCrypt Size: 78B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DexCrypt Size: 96B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ