Static task
static1
Behavioral task
behavioral1
Sample
8d44af6f72bbfe111a4133331220788deca78336539af821b45938acda92c4a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d44af6f72bbfe111a4133331220788deca78336539af821b45938acda92c4a3.exe
Resource
win10v2004-20220901-en
General
-
Target
8d44af6f72bbfe111a4133331220788deca78336539af821b45938acda92c4a3
-
Size
338KB
-
MD5
64c541e957bab9a1d675ee76a45b68e5
-
SHA1
55c15db9344fe512e2472eb4878beb055df52e7a
-
SHA256
8d44af6f72bbfe111a4133331220788deca78336539af821b45938acda92c4a3
-
SHA512
0c12eb24d7ce5572890c983071f517c468da5c2c9feffe9e0b43391496acc635cb6fe14121e7eda9b151445d6f83d7cff8598e3ce0b223251962e04dc00a9e56
-
SSDEEP
6144:8HKsf4yfVA7at+8OFSaTqI2NmQ4Q4Lk8/FLY5atRlRwonbvrjxWlg+f4eNmOOfp2:474Hut+8OF/q3wi4Lk/atRoonbv5Wl1Z
Malware Config
Signatures
Files
-
8d44af6f72bbfe111a4133331220788deca78336539af821b45938acda92c4a3.exe windows x86
955715934de0a60fc3c9d2e5402c981c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateIoCompletionPort
GetACP
VirtualProtect
GetCommandLineA
LoadLibraryExA
ResumeThread
GetCurrentProcessId
PeekConsoleInputA
GetOEMCP
HeapCreate
WaitForSingleObject
GetProcessHeap
InterlockedExchange
GetTimeFormatA
HeapDestroy
IsDebuggerPresent
GetSystemDefaultLCID
GetStdHandle
GlobalMemoryStatus
GetModuleHandleA
GetTapeStatus
user32
GetClassNameA
GetWindowTextLengthA
BeginPaint
GetParent
SetForegroundWindow
GetFocus
ShowWindow
SetActiveWindow
ReleaseDC
FrameRect
DragDetect
GetWindow
GetDlgItem
GetCursorPos
DrawTextA
FillRect
wsprintfA
EndPaint
GetTitleBarInfo
gdi32
GetLayout
CloseFigure
CreateBitmap
GetClipBox
CreatePalette
secur32
DecryptMessage
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ