Static task
static1
Behavioral task
behavioral1
Sample
bf137e4db100e400632557108ca5678e8eb1db1e2365d7e50cc68a6a1387c75e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf137e4db100e400632557108ca5678e8eb1db1e2365d7e50cc68a6a1387c75e.exe
Resource
win10v2004-20221111-en
General
-
Target
bf137e4db100e400632557108ca5678e8eb1db1e2365d7e50cc68a6a1387c75e
-
Size
880KB
-
MD5
36d5eb8d3fe5f16c0199840c1b4f9b69
-
SHA1
846483e0b636873116aa395fdb0ce666eaea8803
-
SHA256
bf137e4db100e400632557108ca5678e8eb1db1e2365d7e50cc68a6a1387c75e
-
SHA512
54d67b7aa5db202593940a912218b93e847db409c378fe2754b85f11e86b6c8129e962e7db4bc610a2be7f8584df99c7bb3c24dcfdd86785df1ff1af08a1a4e9
-
SSDEEP
24576:RhNM2qX0Xdv6TmouhNuTMf48VeHPShZle2OPV:RhekB64hCMTVeCZl
Malware Config
Signatures
Files
-
bf137e4db100e400632557108ca5678e8eb1db1e2365d7e50cc68a6a1387c75e.exe windows x86
d46434b7a242352b218350a465118cc6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetDriveTypeA
lstrlenA
FindClose
HeapDestroy
TlsAlloc
CreateFileW
HeapCreate
CloseHandle
DeviceIoControl
Sleep
GetCommandLineA
LocalSize
GetModuleFileNameW
GetConsoleAliasA
GetModuleHandleA
CloseHandle
GetStartupInfoA
CreateFileMappingW
DeleteFileA
user32
FindWindowW
DispatchMessageA
PeekMessageA
IsZoomed
GetWindowLongA
IsWindow
DestroyWindow
CallWindowProcW
DispatchMessageA
LoadImageA
DrawTextW
DestroyMenu
GetIconInfo
devenum
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ