Static task
static1
Behavioral task
behavioral1
Sample
bf52daa5aa078dc9f62a3b64bdf27cac9a3bd1f9ac29ba2a15fb8aa5d0105ce7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf52daa5aa078dc9f62a3b64bdf27cac9a3bd1f9ac29ba2a15fb8aa5d0105ce7.exe
Resource
win10v2004-20221111-en
General
-
Target
bf52daa5aa078dc9f62a3b64bdf27cac9a3bd1f9ac29ba2a15fb8aa5d0105ce7
-
Size
370KB
-
MD5
c079ebc579bb4752036824df98daf55c
-
SHA1
9a1cd491b9ac61d459910029e0ed40e542ae66af
-
SHA256
bf52daa5aa078dc9f62a3b64bdf27cac9a3bd1f9ac29ba2a15fb8aa5d0105ce7
-
SHA512
9f69a4d57e9832919243064b1e99b8eb1a1ce143c02a95083f8d7ab91d246c7ed4c8826a6a73b4dff5712ee47442254e09156648ddbd80d01fe6c3342fcb9928
-
SSDEEP
6144:ek9kmoMOXSyHyC3jRSaZjmi/KaeF/ae/X7FwHqYLAzB:/am8XVHjNSaZy0KaA/auX0h4
Malware Config
Signatures
Files
-
bf52daa5aa078dc9f62a3b64bdf27cac9a3bd1f9ac29ba2a15fb8aa5d0105ce7.exe windows x86
28083b462fff548893439d0e815bfab5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
FindResourceA
CloseHandle
GetStdHandle
GlobalUnlock
lstrlenW
GetCurrentThreadId
GetVersion
HeapCreate
SetEnvironmentVariableA
GlobalFree
ReleaseMutex
CreateFileA
GetExitCodeProcess
VirtualQuery
DeleteAtom
CreateMutexA
TlsGetValue
SetLastError
GetModuleHandleA
user32
CreateWindowExA
DrawMenuBar
GetDlgItem
CreateMenu
GetIconInfo
GetDC
SetFocus
IsWindow
CheckRadioButton
FillRect
CallWindowProcA
DrawEdge
DispatchMessageA
ntshrui
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsPathSharedW
SetFolderPermissionsForSharing
IsPathSharedA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ