Static task
static1
Behavioral task
behavioral1
Sample
a8ef2558341a5ca8ac58ee543e260ee4.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
a8ef2558341a5ca8ac58ee543e260ee4.exe
Resource
win10v2004-20220721-en
General
-
Target
a8ef2558341a5ca8ac58ee543e260ee4.exe
-
Size
182KB
-
MD5
a8ef2558341a5ca8ac58ee543e260ee4
-
SHA1
5585cc5f17f424639dae06d6feba403c78232f6a
-
SHA256
19e29cc8b874c3dd5fa4b724fb6d5d51db0b7c2fd4e954bb7b1dda228b2225fb
-
SHA512
be08f6166668cf30bd6817dda34a9184c36dcc446ad0b60da4c6426157071af97a57c99a233cf27df4627135916f082637671e36ca6381a4cf99c5cb12374d6a
-
SSDEEP
3072:8xxxgL2AzyQ6w1x7O7SDpJspsrqdzd99r/wKPWKfJUY:8hMbzyY1x7O7SDp+iW399TPWKfJ
Malware Config
Signatures
Files
-
a8ef2558341a5ca8ac58ee543e260ee4.exe.exe windows x86
4cfbd807e4155075766f9f516fa9a7f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
GetSystemTime
GetLocalTime
InterlockedDecrement
GetLocaleInfoW
InterlockedCompareExchange
_hwrite
CancelWaitableTimer
GetSystemDirectoryA
CreateEventW
ReadConsoleA
VerifyVersionInfoA
BuildCommDCBA
GetConsoleAliasExesLengthA
SetSystemTimeAdjustment
PeekConsoleInputA
EnumDateFormatsA
CreateFileW
RegisterWaitForSingleObjectEx
LoadLibraryA
WaitNamedPipeA
GetEnvironmentStrings
FindResourceExA
VirtualProtect
GetFirmwareEnvironmentVariableW
GetModuleFileNameW
BeginUpdateResourceW
EnumCalendarInfoExW
WriteConsoleOutputCharacterA
WriteConsoleA
LoadLibraryW
DeleteFileW
LocalAlloc
GetProcAddress
GetUserDefaultLCID
FindFirstChangeNotificationW
HeapUnlock
GetCalendarInfoW
SetConsoleTitleA
GetBinaryTypeW
GetComputerNameExA
FindNextFileA
OpenJobObjectA
HeapValidate
_lclose
GetComputerNameW
SetFileShortNameW
WriteConsoleOutputCharacterW
TlsSetValue
SetCalendarInfoW
SetComputerNameW
CreateDirectoryExA
DeleteCriticalSection
FindFirstChangeNotificationA
GetVolumePathNameW
GetProcessHandleCount
GetCurrentProcess
GetThreadLocale
GetSystemDefaultLangID
ReadFile
GetStringTypeW
HeapSize
GetDiskFreeSpaceA
RaiseException
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
LCMapStringW
WriteConsoleW
HeapReAlloc
user32
ClientToScreen
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ