Static task
static1
Behavioral task
behavioral1
Sample
bf0ab1da0a16502e6db6cf6f768f98e765b2bd9e0eb3591811e9c13fd35f5665.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf0ab1da0a16502e6db6cf6f768f98e765b2bd9e0eb3591811e9c13fd35f5665.exe
Resource
win10v2004-20220812-en
General
-
Target
bf0ab1da0a16502e6db6cf6f768f98e765b2bd9e0eb3591811e9c13fd35f5665
-
Size
49KB
-
MD5
9b1c9bc465b16b852c71867211fbdb92
-
SHA1
c9ec049fc057ab57103b4449d4837038bbd742b5
-
SHA256
bf0ab1da0a16502e6db6cf6f768f98e765b2bd9e0eb3591811e9c13fd35f5665
-
SHA512
e81dbfd0fdd5e2850c0babd0db0d307618494f3fd6ad3d97918216ba5fdec88cf78db23c45a50bbc8143f48b9cbd35bc7580918184f65f7f4ebeda81f1598d61
-
SSDEEP
768:z3iFwgNYHwWeAgHS6iWzW3BWqwoYsR0h+p388udxevuhv1iyigilfQD8HZrCw4vi:mwBuAJ6Hz1oO+xt0eu1dIQYHZuP6
Malware Config
Signatures
Files
-
bf0ab1da0a16502e6db6cf6f768f98e765b2bd9e0eb3591811e9c13fd35f5665.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 43KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE