Static task
static1
Behavioral task
behavioral1
Sample
bf1e3435886fb5dd4aa9abb779ec000e9598435cd1d6cbbf6a2e431f9f846a9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf1e3435886fb5dd4aa9abb779ec000e9598435cd1d6cbbf6a2e431f9f846a9a.exe
Resource
win10v2004-20220901-en
General
-
Target
bf1e3435886fb5dd4aa9abb779ec000e9598435cd1d6cbbf6a2e431f9f846a9a
-
Size
172KB
-
MD5
0b4cb8623aee9af3e824d5c4d1613a99
-
SHA1
16a6076e95bd8a4168217cd5cb9bb6f37cc5c9c2
-
SHA256
bf1e3435886fb5dd4aa9abb779ec000e9598435cd1d6cbbf6a2e431f9f846a9a
-
SHA512
fe6cff1f706b2f1304f8f4daf883d3137fdba156cd29649176b60cbfcea063aa4da9467a54d1649f729a4d9f3b81eb82748624aabb160ca2ab790f6f853c0dda
-
SSDEEP
3072:3q/tZ9ARoU5oKGPDrOsmco5X1f2LkiCXl5/MMzu//ZaGD:3q/NU2PDKsPgxu/xzD
Malware Config
Signatures
Files
-
bf1e3435886fb5dd4aa9abb779ec000e9598435cd1d6cbbf6a2e431f9f846a9a.exe windows x86
a7dc77a40ddad1ca9093babcb223b371
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
CloseHandle
WaitForSingleObject
CreateProcessA
lstrlenA
LocalFree
lstrcatA
FormatMessageA
GetPrivateProfileStringA
CreateThread
WriteFile
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
GetWindowsDirectoryA
Sleep
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
GetTempPathA
GetFileSize
CopyFileA
GetPrivateProfileIntA
FreeLibrary
GetDiskFreeSpaceA
GetProcAddress
LoadLibraryA
GetTempFileNameA
SetFileAttributesA
RemoveDirectoryA
GetLastError
lstrcpyA
GetCommandLineA
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetUserDefaultLCID
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetSystemDirectoryA
lstrcpynA
OpenFile
GetModuleFileNameA
lstrcmpA
GetStartupInfoA
GetModuleHandleA
VirtualFree
user32
IsWindow
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
DialogBoxParamA
wsprintfA
LoadStringA
SetDlgItemTextA
SetWindowTextA
EnableWindow
GetDlgItem
SendMessageA
EndDialog
PostMessageA
GetMessageA
SetWindowLongA
GetWindowLongA
InvalidateRect
ReleaseDC
GetDC
EndPaint
BeginPaint
DrawTextA
FillRect
GetSysColor
GetClientRect
TranslateMessage
DispatchMessageA
MessageBoxA
GetWindowRect
GetSystemMetrics
SetWindowPos
RegisterWindowMessageA
gdi32
RestoreDC
SetTextColor
SetBkMode
DeleteObject
CreateSolidBrush
SaveDC
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE