Static task
static1
Behavioral task
behavioral1
Sample
8fbc0d00fc8c9c9701e4861fa73516e6fe69141a86ec13367225abcc6ddd750f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8fbc0d00fc8c9c9701e4861fa73516e6fe69141a86ec13367225abcc6ddd750f.exe
Resource
win10v2004-20220812-en
General
-
Target
8fbc0d00fc8c9c9701e4861fa73516e6fe69141a86ec13367225abcc6ddd750f
-
Size
464KB
-
MD5
571a363b4eca710606a38fec6c72c013
-
SHA1
36b5dcce21ee6e9823acc1bb03a2ee9bed969354
-
SHA256
8fbc0d00fc8c9c9701e4861fa73516e6fe69141a86ec13367225abcc6ddd750f
-
SHA512
1c998e243056a4dbdf52a9fb06f4164dec8edd50c2d56c3121493e8c906e06c24298549d86f618b9ca52ca2853f214b32ccd3d8c79fd9a1a5c7c64c1a19a4037
-
SSDEEP
6144:MwzwODMmDm73Sf5wvcYm2sQ2xKYvjdBEHMm7DOe9HRGR4EFktwOmCJEuGG0:MvGMmb5wh1sQE9jjE6JeEkWG
Malware Config
Signatures
Files
-
8fbc0d00fc8c9c9701e4861fa73516e6fe69141a86ec13367225abcc6ddd750f.exe windows x86
53d49e3382bf95130db8463cf2cb30d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
DeleteAtom
GetPriorityClass
GetModuleFileNameA
CreateMailslotA
FindAtomA
GetModuleHandleA
ReadFile
EnterCriticalSection
GetPrivateProfileStringW
GetStdHandle
DeleteFileA
SuspendThread
GetFileAttributesA
CloseHandle
HeapCreate
GetProcessTimes
GetCurrentThreadId
IsBadCodePtr
GetCurrentProcessId
user32
GetWindowLongA
DispatchMessageA
DispatchMessageA
SetFocus
GetClientRect
IsWindow
CallWindowProcW
GetSysColor
GetKeyboardType
GetClassInfoA
GetWindowInfo
GetKeyState
DrawTextW
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 478KB - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ