Static task
static1
Behavioral task
behavioral1
Sample
bf8ae0d2ffb7b8e75d4cd742ae2e457a591c2d42c5028ee319a5fd23476117ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf8ae0d2ffb7b8e75d4cd742ae2e457a591c2d42c5028ee319a5fd23476117ff.exe
Resource
win10v2004-20221111-en
General
-
Target
bf8ae0d2ffb7b8e75d4cd742ae2e457a591c2d42c5028ee319a5fd23476117ff
-
Size
7KB
-
MD5
51c97211b8ba7d54d86e6bef28bc590c
-
SHA1
cc46be68159985d5c2f572230028e96d333245d8
-
SHA256
bf8ae0d2ffb7b8e75d4cd742ae2e457a591c2d42c5028ee319a5fd23476117ff
-
SHA512
3731e1a0e9465f9bee45f792f2a97d6f6058a820637c56f87ae275370ae465648be5ec90b4b3ac900bc1bb9bdd47c626d9def5c2ff6cbc634adca0a1814a0cd2
-
SSDEEP
96:pI+x9sxPj0bE7z8yO2708o0asiaJhn3uWaDLeBomjKW:++x9sxsE7TPans71aDLI/KW
Malware Config
Signatures
Files
-
bf8ae0d2ffb7b8e75d4cd742ae2e457a591c2d42c5028ee319a5fd23476117ff.exe windows x86
957599e9f83645134fb3647f0597eaa3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionNamesA
Sleep
WritePrivateProfileStringA
lstrcatA
lstrlenA
ExitProcess
GetProcessHeap
HeapAlloc
lstrcpyA
HeapFree
GetVersionExA
lstrcmpiA
user32
wsprintfA
GetDesktopWindow
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 196B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ