Static task
static1
Behavioral task
behavioral1
Sample
c8fc790c799d72af4ba0d3443e5fe82cf97bd7afeca2e4faf0daa3d1386d707d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c8fc790c799d72af4ba0d3443e5fe82cf97bd7afeca2e4faf0daa3d1386d707d.exe
Resource
win10v2004-20220812-en
General
-
Target
c8fc790c799d72af4ba0d3443e5fe82cf97bd7afeca2e4faf0daa3d1386d707d
-
Size
912KB
-
MD5
671f98ad936e62a92b9aceb0b374e70e
-
SHA1
7411e212d27091c824c87dab467df53616bbb686
-
SHA256
c8fc790c799d72af4ba0d3443e5fe82cf97bd7afeca2e4faf0daa3d1386d707d
-
SHA512
b2a72a5393c38ece213a62459a9c3e7ef00fe58927a48157c9eb974ac1ae6428638217b26625f0451328a09eeccedd5d89800e59a0ee3fb522974212b1314fb1
-
SSDEEP
12288:gHNmxV1BE8+wKghXdMdGQzM6sDiXRiuSCdMoS5iHaXdEgG54VE8pk59MnA0i7Ucp:cmxV1FmzM6XauECgG5qtnZi7L5lquj
Malware Config
Signatures
Files
-
c8fc790c799d72af4ba0d3443e5fe82cf97bd7afeca2e4faf0daa3d1386d707d.exe windows x86
4631a1d1eaafcea10d8f01350dfcb8a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
GetModuleFileNameA
CreateMutexA
FindResourceA
LoadResource
VirtualFree
SizeofResource
GetProcAddress
LoadLibraryA
LockResource
GetModuleHandleA
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 832KB - Virtual size: 831KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ