Static task
static1
Behavioral task
behavioral1
Sample
8c2380cd411a1a658f97193283aa8cc0b817f62854c00515d4af86c0ab397325.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c2380cd411a1a658f97193283aa8cc0b817f62854c00515d4af86c0ab397325.exe
Resource
win10v2004-20220812-en
General
-
Target
8c2380cd411a1a658f97193283aa8cc0b817f62854c00515d4af86c0ab397325
-
Size
40KB
-
MD5
4c981c23fd7f5dfd912955b5903f8023
-
SHA1
bca033abeea89b8dffcce1b829781e809e617658
-
SHA256
8c2380cd411a1a658f97193283aa8cc0b817f62854c00515d4af86c0ab397325
-
SHA512
ef398a2e72c637a6f911a574a86314c9ecb53794b32bd7e89b7fb1d2187a3cc0860258ccbf966d54d894a5dbb32b7c7a138cff4173b16f200f3fa726e29ee92b
-
SSDEEP
768:mKr7IPNDEuRC9y9wU/QKQdvKhko0XvWEI6tmve:mKnIPNEYeU/497oAvW56tmve
Malware Config
Signatures
Files
-
8c2380cd411a1a658f97193283aa8cc0b817f62854c00515d4af86c0ab397325.exe windows x86
9a5547a8662443032c21fd94f2292c99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetModuleHandleA
CopyFileA
lstrcpyA
lstrlenA
LoadResource
GetTempPathA
LockResource
SizeofResource
SetFilePointer
MapViewOfFile
CreateFileMappingA
lstrcmpA
ExitProcess
CreateFileA
WriteFile
lstrcatA
UnmapViewOfFile
GetFileSize
GetTickCount
CloseHandle
FreeEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringW
HeapAlloc
VirtualAlloc
GetACP
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
RtlUnwind
GetStdHandle
GetOEMCP
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
user32
MessageBoxA
DialogBoxParamA
LoadIconA
CharUpperBuffA
EndDialog
SendDlgItemMessageA
EnableWindow
GetDlgItem
SetFocus
SendMessageA
gdi32
SetTextColor
CreateSolidBrush
DeleteObject
SetBkMode
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ExtractIconA
comctl32
ord17
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE