Static task
static1
Behavioral task
behavioral1
Sample
8e8a0a25b513c64b2ef3180469e2c2c6b3e26a376cf0714e15a0723cee68965d.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
8e8a0a25b513c64b2ef3180469e2c2c6b3e26a376cf0714e15a0723cee68965d.exe
Resource
win10v2004-20220721-en
General
-
Target
8e8a0a25b513c64b2ef3180469e2c2c6b3e26a376cf0714e15a0723cee68965d
-
Size
185KB
-
MD5
90ed21823e9da8599a25496e697ae3f5
-
SHA1
deb23721aa3da4d4b556ce2d9ef5602ab7cbb78b
-
SHA256
8e8a0a25b513c64b2ef3180469e2c2c6b3e26a376cf0714e15a0723cee68965d
-
SHA512
f7cbeeea106311cc965737f023e25e0061c89ba5e4915ce39771c61ec64815fb51611479a51a8ecb4ad1aa25b674f873679d7221a58d0e57d7c97ceffde80728
-
SSDEEP
3072:NuGShphBYpQ20cqu6aLN7S2SaNNNEpaCk9VP6L+UHHCDMXQLhrMFIrXq2Rl9Ui+a:wGPm/aTyFHid92wqcUicQsC
Malware Config
Signatures
Files
-
8e8a0a25b513c64b2ef3180469e2c2c6b3e26a376cf0714e15a0723cee68965d.exe windows x86
10c8301a56c96f1bbabc31d0557cb90e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleWindow
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringEx
HeapSize
GetStringTypeW
HeapReAlloc
HeapAlloc
RtlUnwind
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
Sleep
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TerminateProcess
GetCommandLineA
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
CreateFileW
comdlg32
GetSaveFileNameW
PrintDlgW
PrintDlgExA
GetOpenFileNameA
glu32
gluErrorString
gluBeginCurve
gluQuadricCallback
gluLookAt
gluGetTessProperty
wsnmp32
ord103
ord200
ord902
ord999
ord104
wininet
HttpQueryInfoW
InternetFindNextFileW
InternetHangUp
HttpEndRequestW
InternetErrorDlg
FindFirstUrlCacheEntryExA
winmm
midiInMessage
mmioGetInfo
mmioRead
ws2_32
getsockname
getservbyname
WSAGetServiceClassInfoA
WSAEnumProtocolsA
WSASendTo
WSAEventSelect
__WSAFDIsSet
WPUCompleteOverlappedRequest
socket
select
wsock32
ord1142
ole32
OleRegEnumVerbs
OleLoad
PropStgNameToFmtId
CoIsHandlerConnected
CoMarshalInterface
CLIPFORMAT_UserMarshal
user32
SetWindowPos
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ