?BreadA@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
f3df371198dc03be2687334fd5bb32475c69eb79a83f18b74fc82d19bad0caf9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3df371198dc03be2687334fd5bb32475c69eb79a83f18b74fc82d19bad0caf9.exe
Resource
win10v2004-20221111-en
General
-
Target
f3df371198dc03be2687334fd5bb32475c69eb79a83f18b74fc82d19bad0caf9
-
Size
154KB
-
MD5
a656ed72079c1302cb3e18cc39b8be48
-
SHA1
ecf6986fa049983767622225a2e84b4b2b7c31b3
-
SHA256
f3df371198dc03be2687334fd5bb32475c69eb79a83f18b74fc82d19bad0caf9
-
SHA512
71c6e6aff3b392c7cb468e448cf4795bdcb365ca531535b3dafe6b6180f4636cab868d95807e901e37a87f970b7c90df28b1a565fe213d75ebd14ba8981cc9eb
-
SSDEEP
3072:IGa4g5U5mw4HuVgwAZ8OpsCVfwkklnQ2b5PFSOR6ZoG4Zazoxg33Y:IgcUUXUAZ5pfkpQs5PzzlUaC
Malware Config
Signatures
Files
-
f3df371198dc03be2687334fd5bb32475c69eb79a83f18b74fc82d19bad0caf9.exe windows x86
d855fb3baadef1a5b10fe46aad6327dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
GetSaveFileNameW
kernel32
ConnectNamedPipe
ReadFile
GlobalCompact
GlobalDeleteAtom
TryEnterCriticalSection
IsValidLanguageGroup
InitializeCriticalSection
EnumResourceLanguagesA
LocalUnlock
lstrcpyW
GetAtomNameW
FlushFileBuffers
GetSystemWindowsDirectoryW
GlobalAddAtomW
OpenFileMappingA
GetTimeZoneInformation
GetFileAttributesExA
OpenFileMappingW
GlobalLock
GetCurrentDirectoryW
FindResourceExW
SetSystemTimeAdjustment
GetLocaleInfoA
RtlUnwind
GetWindowsDirectoryW
user32
GetActiveWindow
InvalidateRgn
IsCharUpperW
GetDesktopWindow
GetForegroundWindow
Exports
Exports
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ