Static task
static1
Behavioral task
behavioral1
Sample
8e763b9532df7dd76e947f65f3af54204d23a83704c5d2548726e075600008e6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8e763b9532df7dd76e947f65f3af54204d23a83704c5d2548726e075600008e6.exe
Resource
win10v2004-20220901-en
General
-
Target
8e763b9532df7dd76e947f65f3af54204d23a83704c5d2548726e075600008e6
-
Size
232KB
-
MD5
6e1c1cb56d17134847d40d25dcb0abf0
-
SHA1
1fc3cad69578ea4df9eca6e9c887dc1d219a5fa3
-
SHA256
8e763b9532df7dd76e947f65f3af54204d23a83704c5d2548726e075600008e6
-
SHA512
ae5a1f424fc789ca378a6c13b71cb3a3e5bce460ba1e5f08c54d1ada410de529f7c3156e18baf5905d503ef586f8a65dd1d7cfd84cef45418a4dc0835199d1c5
-
SSDEEP
3072:1VVQaIglv1lp3pQLUtOPeiaEhkTYy3Y+NxKBC5CH+xF7vCww95YeoLoSqtIzp:1jQyXTYY3OBC564ubYe5t
Malware Config
Signatures
Files
-
8e763b9532df7dd76e947f65f3af54204d23a83704c5d2548726e075600008e6.exe windows x86
702a4c4630411bdc26b260034bd8fa6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
FindFirstFileW
GetLastError
FindClose
FindNextFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetSystemTimeAsFileTime
msvcr80
_wtoi
qsort
fflush
wcsftime
wctomb
fputws
realloc
mbtowc
_strdup
putc
_errno
_read
_write
getc
strcmp
strncmp
strtod
strtol
isalnum
strrchr
sprintf
strlen
_snprintf
calloc
memmove
fopen
__iob_func
_vsnprintf
memset
memcpy
_localtime32
_time32
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
fseek
ftell
wcsncpy
wcstok
fwrite
wprintf
fread
_wfopen
_snwprintf
exit
fclose
_wsystem
malloc
free
_snwprintf_s
printf
fprintf
_CIpow
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
r`H Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE