Static task
static1
Behavioral task
behavioral1
Sample
bfbe506ffb0730077df557bf8aeaa5dc6ffc43767a3640ed6fd9f2d4aca33555.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfbe506ffb0730077df557bf8aeaa5dc6ffc43767a3640ed6fd9f2d4aca33555.exe
Resource
win10v2004-20220812-en
General
-
Target
bfbe506ffb0730077df557bf8aeaa5dc6ffc43767a3640ed6fd9f2d4aca33555
-
Size
34KB
-
MD5
cac512e0f5972c535fcc9bcc5a5f8e21
-
SHA1
d3aa548571c9e3a1226847bce4250e871caf85ea
-
SHA256
bfbe506ffb0730077df557bf8aeaa5dc6ffc43767a3640ed6fd9f2d4aca33555
-
SHA512
0347c511b5fa3f37b060c06ba2c2ff174f098f3bd8305d51ce96af44cdb44243289f910c2f3fc76f94b1ee9769978f46721802d5b8f90fda617db98c3de1ab0b
-
SSDEEP
384:2vK5+oPfItQzoP6IIgmfTKTMNUPzLf9PhxNYO0zbr+ruiw7+W1t:Qu+kgkodITeMNMzLVP+t39KW1t
Malware Config
Signatures
Files
-
bfbe506ffb0730077df557bf8aeaa5dc6ffc43767a3640ed6fd9f2d4aca33555.exe windows x86
2e663f965c4a7dc8562de2cf4268ffc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalMemoryStatusEx
AreFileApisANSI
DeleteFileA
GetPrivateProfileSectionNamesW
BindIoCompletionCallback
FileTimeToLocalFileTime
FindResourceExA
user32
DdeCreateStringHandleW
shell32
SHLoadInProc
SHPathPrepareForWriteW
InternalExtractIconListA
ShellAboutA
DoEnvironmentSubstA
Control_RunDLLA
ExtractAssociatedIconExW
DllCanUnloadNow
DragQueryFileA
StrCmpNW
gdi32
GdiPlayDCScript
CreateRectRgnIndirect
DeleteColorSpace
EngStretchBltROP
GdiSwapBuffers
SetSystemPaletteUse
FloodFill
CreateScalableFontResourceW
Sections
.code Size: 9KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ