Static task
static1
Behavioral task
behavioral1
Sample
8514a2eca4090f400a43c4af915eb3ef6e9c15dabe69716189e7c68c72cfa285.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8514a2eca4090f400a43c4af915eb3ef6e9c15dabe69716189e7c68c72cfa285.exe
Resource
win10v2004-20220414-en
General
-
Target
8514a2eca4090f400a43c4af915eb3ef6e9c15dabe69716189e7c68c72cfa285
-
Size
617KB
-
MD5
d14bc9efe80aeb7d172cbb590f80eba7
-
SHA1
9d6ea38d9a33446488e3a53ca35669f7ded2b747
-
SHA256
8514a2eca4090f400a43c4af915eb3ef6e9c15dabe69716189e7c68c72cfa285
-
SHA512
cb22f3c7d3f35cc4d149d88caf128229c396123997b52c2dfb70203cbb671f967c20bb1615ec84227d1207d50cacd32daf1360f076d42c50b113949074192b58
-
SSDEEP
12288:Eo0gV3rrY/DY9dX4CnQoQWHudfrkqhxHnubfzkZNL1JIl:c/UzXXnQ9gu9jWfzkZ/m
Malware Config
Signatures
Files
-
8514a2eca4090f400a43c4af915eb3ef6e9c15dabe69716189e7c68c72cfa285.exe windows x86
b2843997cc6f0d26753c1e029a6c5e56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comsvcs
CoEnterServiceDomain
CoLoadServices
RecycleSurrogate
user32
CreateWindowExA
IsDialogMessageA
DispatchMessageW
GetClassLongA
wsprintfA
CharToOemA
LoadIconA
DialogBoxParamA
MessageBoxW
GetDlgItemTextW
PostMessageA
kernel32
LoadLibraryA
GetCommandLineA
EncodePointer
FindResourceExW
FormatMessageA
DeleteFileW
SetPriorityClass
OpenFileMappingW
OpenEventW
SetEnvironmentVariableA
OpenSemaphoreW
CreateJobObjectW
GetModuleHandleA
GetFileAttributesA
GetTempFileNameW
WaitForSingleObject
WriteConsoleW
CreateSemaphoreA
lstrcmpiA
CreateProcessA
CreateDirectoryW
GetProcAddress
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.opc Size: 522KB - Virtual size: 522KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ