Static task
static1
Behavioral task
behavioral1
Sample
bfab98f0850483fe32238865665f66c2799de06382217feac6a7f66470744dd3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfab98f0850483fe32238865665f66c2799de06382217feac6a7f66470744dd3.exe
Resource
win10v2004-20221111-en
General
-
Target
bfab98f0850483fe32238865665f66c2799de06382217feac6a7f66470744dd3
-
Size
68KB
-
MD5
a3cc108aa519dc5fcc27a85cd6882b16
-
SHA1
47cf43eed30c11c4af02e094bb54e255a3af6f4f
-
SHA256
bfab98f0850483fe32238865665f66c2799de06382217feac6a7f66470744dd3
-
SHA512
7164875f9d0a38005e5d1c4ed20fb13f6d71e62eed7a20ff5bd1d4be7f0653c6468d837d8589fa4f386d4a9541fb2b2864f400ed414e41ff1482c6776006f532
-
SSDEEP
1536:kXFr1prMq4256NCIiSHbE4ZYrdhCf3Yt55gsoKpCcp:kXFr1prMu56NdILtrghKpZp
Malware Config
Signatures
Files
-
bfab98f0850483fe32238865665f66c2799de06382217feac6a7f66470744dd3.exe windows x86
06d5fb45097473f263519aa0796df192
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
wininet
InternetSetOptionA
shell32
ShellExecuteA
Sections
CODE Size: 63KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE