Static task
static1
Behavioral task
behavioral1
Sample
8dca437ddb1e4da984df797cfa3a3028b33b3e78fdeae7f0a2e6421bb7ff5fec.exe
Resource
win7-20220414-en
General
-
Target
8dca437ddb1e4da984df797cfa3a3028b33b3e78fdeae7f0a2e6421bb7ff5fec
-
Size
460KB
-
MD5
eb5171507f7ad50eb8ce6f56e0fc8155
-
SHA1
715b4a38f1503f7c5079210fcbd783a817f06c3f
-
SHA256
8dca437ddb1e4da984df797cfa3a3028b33b3e78fdeae7f0a2e6421bb7ff5fec
-
SHA512
28cbf3fc98b085ba3967b30da20421a6ed5ad7cd7605feb1afa4348c1bbcf93cd6d9c6b1cbd6fa3874649aab44a7e675609502567a9c3c5ad3fcd5d29bca3d92
-
SSDEEP
6144:RwxcgpvF3y0fUxHsJdyt/lree8XovcvuJ60QScC2W18Jrc/YcZytB1vMQuLehBYG:gcgpv5yrHHR8Xm60DdYTv1vlYd
Malware Config
Signatures
Files
-
8dca437ddb1e4da984df797cfa3a3028b33b3e78fdeae7f0a2e6421bb7ff5fec.exe windows x86
e04c7eb0889a2e5ea21a891851d1d9af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
SetHandleInformation
SetEvent
GetModuleHandleW
GetWindowsDirectoryA
FindActCtxSectionStringA
GetFileAttributesA
lstrcpynW
VerifyVersionInfoA
WriteConsoleW
GetACP
GetProcAddress
GetTapeStatus
GetProcessHeaps
ReadFileEx
VerLanguageNameW
LockResource
GetCommMask
WaitForMultipleObjects
GetModuleHandleA
GetPrivateProfileSectionA
RequestDeviceWakeup
GetStringTypeW
GetConsoleTitleW
SetFileShortNameA
DeleteFileW
GlobalReAlloc
WriteProcessMemory
LCMapStringW
lstrcpyA
GetCurrentActCtx
WaitNamedPipeA
lstrlenA
DeleteTimerQueueEx
CreateMutexW
BuildCommDCBAndTimeoutsW
SetDefaultCommConfigA
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
CloseHandle
CreateFileA
HeapSize
LoadLibraryW
SetStdHandle
MultiByteToWideChar
FlushFileBuffers
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW
user32
GetCaretPos
advapi32
BackupEventLogA
RegQueryInfoKeyA
AdjustTokenGroups
RegQueryValueExW
MapGenericMask
CloseEventLog
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 74.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ