Static task
static1
Behavioral task
behavioral1
Sample
bfa1a12e0486da0025fb13116ca03268.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bfa1a12e0486da0025fb13116ca03268.exe
Resource
win10v2004-20240226-en
General
-
Target
bfa1a12e0486da0025fb13116ca03268
-
Size
99KB
-
MD5
bfa1a12e0486da0025fb13116ca03268
-
SHA1
760ab1af2ab790e38a100c57ea652268da5d3ed6
-
SHA256
80c5ef5e2bd83b96480c618d475653fc75141d8e2ed1a23a1bff4770c1bbf8cd
-
SHA512
acc693e24ebfdbd5718af6ccee8f5632daa474f5d089a8f732be15338f5b49441e1c0ca3e271b34352c28403b8203779809f4a571ac1318a068f03b322ff2d28
-
SSDEEP
1536:Ii6S9Er8rFOZKjI4eu4i6sUdkCBgxpYICKcjr3/yBccY0SH0fQo5Ot0q5a9ch:nK9gjI4eyPUdkCBMpBCKcdcYxUf5FqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa1a12e0486da0025fb13116ca03268
Files
-
bfa1a12e0486da0025fb13116ca03268.exe windows:5 windows x86 arch:x86
dd48d1702d7c250af91de18b7e76333f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
FindResourceW
RtlUnwind
GetCurrentProcessId
GetExitCodeProcess
TlsSetValue
GetStdHandle
GetSystemDirectoryA
LoadLibraryW
GetConsoleMode
GetFileSize
InitializeCriticalSectionAndSpinCount
Sleep
ExpandEnvironmentStringsW
WaitForSingleObject
FindFirstFileW
SetErrorMode
WaitForMultipleObjects
GetDriveTypeW
CreateProcessA
VirtualAlloc
SizeofResource
DeviceIoControl
GetDriveTypeA
ExitProcess
RemoveDirectoryW
QueryPerformanceCounter
GetSystemTime
GetCurrentThreadId
LCMapStringW
IsBadCodePtr
msvcrt
_lock
__CxxFrameHandler
__p__commode
atoi
_c_exit
_wcsnicmp
sscanf
exit
fwrite
_isatty
_itoa
_acmdln
strlen
atol
_iob
strrchr
_itow
_snwprintf
wcsspn
sprintf
__setusermatherr
memmove
__set_app_type
wcsrchr
??3@YAXPAX@Z
realloc
__p__fmode
__pioinfo
_wcsupr
mbstowcs
fflush
swscanf
wcscat
__initenv
_strdup
wcscpy
iswalpha
wcschr
_stricmp
user32
DispatchMessageA
GetCursorPos
MessageBeep
MessageBoxA
CheckDlgButton
SetMenu
GetCapture
EqualRect
GetDC
SetWindowLongW
GetKeyState
IsWindow
SetWindowTextW
InvalidateRect
LoadBitmapW
GetDlgItem
BeginPaint
GetForegroundWindow
DrawTextW
GetWindowTextLengthW
CharUpperA
GetParent
CreatePopupMenu
GetWindowRect
GetClassNameW
GetSystemMetrics
ole32
StringFromIID
StgIsStorageFile
CoCreateInstanceEx
StringFromGUID2
CoUnmarshalInterface
PropVariantCopy
CoInitialize
CreateILockBytesOnHGlobal
IIDFromString
CoGetClassObject
CreateDataAdviseHolder
StringFromCLSID
OleRegEnumVerbs
GetRunningObjectTable
CoCreateGuid
CLSIDFromString
CoInitializeEx
CoDisconnectObject
CoFreeUnusedLibraries
CLSIDFromProgID
CoRevokeClassObject
CoTaskMemFree
OleRun
ReleaseStgMedium
CoGetInterfaceAndReleaseStream
GetHGlobalFromStream
CoGetCallContext
MkParseDisplayName
WriteClassStm
OleRegGetMiscStatus
CoMarshalInterface
CoGetObjectContext
CoReleaseMarshalData
ProgIDFromCLSID
OleSaveToStream
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 30KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ