Static task
static1
Behavioral task
behavioral1
Sample
Piriform_Bundle_Activator_v1.1_By_DFoX.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Piriform_Bundle_Activator_v1.1_By_DFoX.exe
Resource
win10v2004-20221111-en
General
-
Target
Piriform_Bundle_Activator_v1.1_By_DFoX.exe
-
Size
530KB
-
MD5
7b7dd6821fe384d7f07a147c5ee8f393
-
SHA1
2039f3bcc2bd6914f8ccbdf8e14be9c2defcc364
-
SHA256
f659701c326f554a0beed7392de9453a28a3c0f24f31b793f49e46baaf55522c
-
SHA512
ac1f5314429a4726d2f6058172584e1f922aa2df07945fdae9154e2efac496cc49c04f646dcfcefe7e24acc692f1196304a05113388639b385d5fbca1ee933b6
-
SSDEEP
12288:zJ8P238kWGPrh75Rfk5G0erI/C1GtCz+n26Q58210UXz:d8mcGl75iGvrI/C4t2+dQTVXz
Malware Config
Signatures
Files
-
Piriform_Bundle_Activator_v1.1_By_DFoX.exe.exe windows x86
c3355bae7bc68a0c09b86b55a989ad02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
ScrollDC
advapi32
RegQueryValueW
shell32
SHGetDiskFreeSpaceA
mscoree
_CorExeMain
comctl32
InitCommonControlsEx
Sections
.itext Size: - Virtual size: 884KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.shared Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE