Static task
static1
Behavioral task
behavioral1
Sample
bf7281972baa4d27494d35507609eacefc9365a4211ac51484a12553b8ba043e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf7281972baa4d27494d35507609eacefc9365a4211ac51484a12553b8ba043e.exe
Resource
win10v2004-20221111-en
General
-
Target
bf7281972baa4d27494d35507609eacefc9365a4211ac51484a12553b8ba043e
-
Size
2.6MB
-
MD5
b316a2da862ef539626bfe64a30d723b
-
SHA1
5b5995e0a536f32dd25f2c9aabbb544772620247
-
SHA256
bf7281972baa4d27494d35507609eacefc9365a4211ac51484a12553b8ba043e
-
SHA512
2685437f945a1bf42114c5e97643e41513c555956072d2c1b9940bb1a5292cae81a445b5e73ef4575a4b9193a6a1f56fe8da9950590cde01eecf5e731f046459
-
SSDEEP
49152:iK+jszfM+lrD2eFqfC90vYFOj28lQmtxbyaPWkj:iK+jszx1D2SqfxBN32abj
Malware Config
Signatures
Files
-
bf7281972baa4d27494d35507609eacefc9365a4211ac51484a12553b8ba043e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.lwzlak Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cge94s Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.$2r1o0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3.0MB
.null Size: - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtss Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE