Static task
static1
Behavioral task
behavioral1
Sample
Bonzify.exe
Resource
win7-20220812-en
General
-
Target
Bonzify (1).zip
-
Size
5.6MB
-
MD5
476b2ef2354fc0b619fe0ed297b4c314
-
SHA1
1a4fa699300a99b2f22c061010bbf18090bec83e
-
SHA256
9ef92c016571af585947b08f53ec13d6c34833bac6924aa7b556506fbf407609
-
SHA512
9d5ac0ed54c81fee24d7cde88fe5297d2d22398f97eb40e862c4e496433498141d28621f8ec6c5bbf6ddc229ab1373b3a09ab577ffa4f2ca53ac614d1a8104e7
-
SSDEEP
98304:5Yry2CySsWxBow+gdIKa77AULjdVaNVDx/P49JmP62t5+p5Znmo4nKLQG0WyPs:5KyzdxqgdIRAQjdCx/A9J862twHZnmol
Malware Config
Signatures
Files
-
Bonzify (1).zip.zip
Password: mysubsarethebest
-
Bonzify.exe.exe windows x86
Password: mysubsarethebest
0bee32f8779ce7af7a869e923f1dd6fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
lstrcmpA
lstrcatA
CreateFileA
lstrcpyA
CloseHandle
LocalFree
GetProcessHeap
FlushFileBuffers
Sleep
DeleteFileA
CreateThread
HeapAlloc
SizeofResource
lstrlenA
SetLastError
TerminateProcess
ExpandEnvironmentStringsA
GetFullPathNameA
FindResourceA
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
LockResource
Process32Next
LoadResource
lstrcmpiA
CreateProcessA
FindNextFileA
WriteFile
HeapFree
FindFirstFileA
Process32First
LocalAlloc
user32
SendMessageA
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
shell32
SHCreateDirectoryExA
SHChangeNotify
ole32
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
shlwapi
PathRemoveFileSpecA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Readme.txt