Static task
static1
Behavioral task
behavioral1
Sample
8ac74b28ef8d28e55baa8a6fc51d69319768f125d3221e1380b7e826eae558d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ac74b28ef8d28e55baa8a6fc51d69319768f125d3221e1380b7e826eae558d4.exe
Resource
win10v2004-20220812-en
General
-
Target
8ac74b28ef8d28e55baa8a6fc51d69319768f125d3221e1380b7e826eae558d4
-
Size
490KB
-
MD5
1a4e644c3f076d993802b3ec2d427f28
-
SHA1
db3c364a9600a03be73878d3bdc258eab0068eba
-
SHA256
8ac74b28ef8d28e55baa8a6fc51d69319768f125d3221e1380b7e826eae558d4
-
SHA512
beee1a368881eb6deafecc26b841168ff171c257637569b7a24f16ce03bc4a5b250f66b17f27dfb09bae1bf55ff58eae07ca6f2e307309775188fedb0014d1c2
-
SSDEEP
12288:1GjmgcieFKAX4EUZqBB9M+zYV5oSM+sq0pX:1BDieF3XfUZqb9M+zk5oSM+sq0
Malware Config
Signatures
Files
-
8ac74b28ef8d28e55baa8a6fc51d69319768f125d3221e1380b7e826eae558d4.exe windows x86
edde9eac1411c76cee0f10b991e52227
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetKerningPairsA
CopyMetaFileA
GetCharWidthFloatA
LineDDA
DeleteColorSpace
SetBkMode
GetMapMode
GetEnhMetaFileA
SelectObject
SetBoundsRect
OffsetClipRgn
AngleArc
comdlg32
PageSetupDlgW
GetOpenFileNameW
FindTextA
GetSaveFileNameW
ReplaceTextA
ChooseFontA
ChooseFontW
GetOpenFileNameA
ChooseColorW
LoadAlterBitmap
ReplaceTextW
FindTextW
GetSaveFileNameA
PrintDlgW
GetFileTitleW
PrintDlgA
GetFileTitleA
wininet
FtpGetFileW
InternetConnectW
FreeUrlCacheSpaceA
RetrieveUrlCacheEntryFileW
ResumeSuspendedDownload
ShowClientAuthCerts
FtpOpenFileA
InternetSetCookieW
UnlockUrlCacheEntryFileW
ReadUrlCacheEntryStream
InternetCombineUrlA
InternetUnlockRequestFile
SetUrlCacheGroupAttributeA
InternetOpenA
InternetCrackUrlW
InternetWriteFileExA
InternetQueryOptionA
shell32
SHGetPathFromIDListA
ShellExecuteA
ExtractAssociatedIconW
SHChangeNotify
DragQueryPoint
SHQueryRecycleBinW
CommandLineToArgvW
kernel32
GetFileType
GetEnvironmentStrings
SetFilePointer
TlsGetValue
RtlUnwind
EnumCalendarInfoW
GetProfileStringA
GetACP
LoadLibraryA
GetVersionExA
GetModuleFileNameA
FlushFileBuffers
CreateMutexW
VirtualAlloc
GetDateFormatW
GetProcAddress
GetDateFormatA
GetSystemDefaultLangID
TerminateProcess
HeapValidate
GetCurrentProcess
GetPrivateProfileSectionNamesW
IsValidLocale
FreeEnvironmentStringsW
GetStringTypeA
ExitProcess
WaitNamedPipeA
DebugBreak
TlsSetValue
QueryPerformanceCounter
VirtualProtect
GetSystemInfo
SetConsoleCtrlHandler
GetTimeZoneInformation
EnterCriticalSection
FindNextFileA
GetEnvironmentStringsW
GetUserDefaultLCID
GetCurrentThread
SetEnvironmentVariableA
CompareStringA
ResumeThread
CompareStringW
GetThreadSelectorEntry
FreeEnvironmentStringsA
GetStringTypeW
HeapFree
LeaveCriticalSection
IsBadWritePtr
GetOEMCP
SetStdHandle
GetCurrentProcessId
GetStartupInfoA
MultiByteToWideChar
EnumSystemLocalesA
GetTimeFormatA
CreateDirectoryW
InterlockedIncrement
GetLocaleInfoW
InterlockedDecrement
CloseHandle
HeapDestroy
GlobalGetAtomNameA
TlsFree
GetSystemTimeAsFileTime
RemoveDirectoryA
VirtualFree
HeapAlloc
GetCPInfo
InterlockedExchange
GetLastError
SetLastError
GetThreadContext
GetLocaleInfoA
DeleteCriticalSection
GetStdHandle
TlsAlloc
OutputDebugStringA
HeapReAlloc
UnhandledExceptionFilter
IsValidCodePage
SetHandleCount
FileTimeToSystemTime
GetTickCount
GetModuleHandleA
MoveFileA
FindAtomW
VirtualQuery
InitializeCriticalSection
EnumSystemLocalesW
IsBadReadPtr
GetVolumeInformationA
HeapCreate
GetCurrentThreadId
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetCommandLineA
FileTimeToDosDateTime
SetFileAttributesW
WriteFile
user32
LoadMenuW
RemoveMenu
ChangeMenuW
CreatePopupMenu
ExcludeUpdateRgn
SendMessageW
AppendMenuW
EnumPropsA
IsWindowUnicode
DdeSetUserHandle
EndDeferWindowPos
MonitorFromWindow
PeekMessageA
ChildWindowFromPoint
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ