Static task
static1
Behavioral task
behavioral1
Sample
8aea2464a8924213942b0ccd57d477983849c4bc1c428d92450603753ac1ec33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8aea2464a8924213942b0ccd57d477983849c4bc1c428d92450603753ac1ec33.exe
Resource
win10v2004-20220901-en
General
-
Target
8aea2464a8924213942b0ccd57d477983849c4bc1c428d92450603753ac1ec33
-
Size
131KB
-
MD5
810ac6ffd6dceade72862c04f6eaedf0
-
SHA1
ddb35226b2ce0ad9e266ac92a2edade3a21abc36
-
SHA256
8aea2464a8924213942b0ccd57d477983849c4bc1c428d92450603753ac1ec33
-
SHA512
03676b16d60e55c59db13a02a2cd679a0f517377734ba89a1e3bbb5c8e193bdc6a3e234219a12c1a1e5bf25416835dc22795bababaeae478fa14d3a47caea0a4
-
SSDEEP
384:0nl8y4QVbQFKK/b1zM3fKY1iwBiS05crcBl+g+Ro8+qMyt0c43UmVg1V:0n+ytVsbW31iqCcruAg++tbb+1
Malware Config
Signatures
Files
-
8aea2464a8924213942b0ccd57d477983849c4bc1c428d92450603753ac1ec33.exe windows x86
5fa7740a4682fa10447a58bfe0458be8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
Thread32First
lstrcpyW
GetCurrentThreadId
GetModuleHandleA
GetProcessWorkingSetSize
GetSystemTimeAsFileTime
SetEnvironmentVariableW
ReadFile
GetThreadLocale
GetCurrentProcess
GetTempFileNameW
GetCurrentThread
GetCurrentProcessId
GetThreadTimes
CreateEventA
LoadLibraryA
GetSystemTime
DeleteAtom
VirtualAlloc
WaitForSingleObject
GetProcAddress
IsBadReadPtr
VirtualProtectEx
VirtualFree
Sleep
SystemTimeToFileTime
user32
CloseWindow
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
MessageBoxA
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
Sections
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ