Static task
static1
Behavioral task
behavioral1
Sample
bf175d1a0cfc443393173421cc9649b2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bf175d1a0cfc443393173421cc9649b2.exe
Resource
win10v2004-20240226-en
General
-
Target
bf175d1a0cfc443393173421cc9649b2
-
Size
564KB
-
MD5
bf175d1a0cfc443393173421cc9649b2
-
SHA1
3d383e0cd3386a0417ab83aeb763f901194457ac
-
SHA256
ea25382f6396171dde0fde296524cab2c002d8c247ec164dea71ef4fb9c5a6a4
-
SHA512
2bf7da9d1ed8d4cd8b4f46693724ffcda60dbc704999c08d56e50a95e5987aa39c8aa3261b89d785c9262fac803d03f93504ae4b8aec14451f14ae11a3eae308
-
SSDEEP
12288:uA/hrdvHCiu+D8HoLeI4IFhGMZ7pnBUvhXP1h37+dx:uA/fHCSSq4IjppnBUpf11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf175d1a0cfc443393173421cc9649b2
Files
-
bf175d1a0cfc443393173421cc9649b2.exe windows:4 windows x86 arch:x86
00c8a9ba77c98d6fff7d932792c97189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSettings
comctl32
InitCommonControlsEx
ImageList_Create
ImageList_SetOverlayImage
CreateStatusWindowW
ImageList_DragLeave
ImageList_EndDrag
DrawStatusTextA
ImageList_SetDragCursorImage
ImageList_GetImageCount
ImageList_AddMasked
CreatePropertySheetPage
ImageList_SetBkColor
ImageList_GetFlags
ImageList_BeginDrag
ImageList_Merge
ImageList_GetDragImage
ImageList_Draw
CreateUpDownControl
DrawStatusText
ImageList_DrawIndirect
ImageList_Replace
ImageList_SetFlags
CreateToolbarEx
wininet
GopherGetLocatorTypeW
FtpDeleteFileA
GetUrlCacheGroupAttributeW
user32
PostThreadMessageA
GetMenuItemInfoA
DestroyWindow
GetMessageA
WinHelpA
ClientToScreen
MessageBoxA
RegisterWindowMessageA
ShowWindow
CloseDesktop
MessageBoxIndirectW
wsprintfW
WINNLSGetEnableStatus
AnimateWindow
RegisterClassExA
GetKeyboardState
IsChild
CreateMenu
SetWindowsHookExA
GetDCEx
PtInRect
SendNotifyMessageA
RegisterClassA
CreateWindowExW
LoadImageW
DdeQueryStringA
DlgDirListComboBoxW
DefMDIChildProcA
CreateDialogParamW
DdeAbandonTransaction
EnumDisplaySettingsW
DefWindowProcW
DdeCmpStringHandles
LoadAcceleratorsW
IsZoomed
MonitorFromPoint
kernel32
GetUserDefaultLCID
GlobalAlloc
UnhandledExceptionFilter
EnumSystemLocalesA
IsValidLocale
CreateMutexA
GetTempFileNameW
VirtualAlloc
lstrcmpi
GetDateFormatA
TlsFree
GetStringTypeW
CreateSemaphoreW
FlushFileBuffers
LCMapStringA
GetDiskFreeSpaceA
GetEnvironmentStrings
RtlUnwind
VirtualFree
GetProcessHeap
VirtualProtect
ReadFile
GetStdHandle
IsBadWritePtr
GetModuleHandleA
GetCurrentThread
GetEnvironmentStringsW
GetCurrentThreadId
CreateMailslotA
WriteFile
SetFilePointer
MultiByteToWideChar
GetTimeFormatA
GetFileType
GetSystemInfo
VirtualFreeEx
WideCharToMultiByte
LoadLibraryA
GetVersionExA
GetProcAddress
FreeEnvironmentStringsA
WriteConsoleOutputCharacterW
SetLastError
HeapReAlloc
GetPrivateProfileStructW
FreeEnvironmentStringsW
GetLocaleInfoW
TlsAlloc
GetTickCount
HeapAlloc
QueryPerformanceCounter
DeleteCriticalSection
WriteConsoleOutputW
CloseHandle
GetStringTypeA
IsValidCodePage
EnterCriticalSection
LocalReAlloc
SetHandleCount
GetCPInfo
GetACP
GetFileAttributesExA
GetCommandLineA
OpenFileMappingW
GetLocaleInfoA
SetStdHandle
AllocConsole
HeapCreate
EnumCalendarInfoExA
GetCurrentProcessId
InterlockedExchange
SetEnvironmentVariableA
lstrcmpW
CompareStringA
GetCurrentProcess
CompareStringW
GetStartupInfoA
VirtualQuery
LCMapStringW
WritePrivateProfileStructW
LoadLibraryExA
GetOEMCP
GetShortPathNameA
InitializeCriticalSection
HeapFree
GetSystemTimeAsFileTime
lstrcmpA
ExitProcess
FileTimeToLocalFileTime
TerminateProcess
TlsSetValue
GetModuleFileNameA
SetConsoleOutputCP
TlsGetValue
HeapDestroy
LoadModule
GetLastError
HeapSize
LeaveCriticalSection
GetTimeZoneInformation
OpenMutexA
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ