Static task
static1
Behavioral task
behavioral1
Sample
8fc286a964df88a232bb51b9c745e75f6a3b21313af2aeba2da96121ee03f7d3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8fc286a964df88a232bb51b9c745e75f6a3b21313af2aeba2da96121ee03f7d3.exe
Resource
win10v2004-20220812-en
General
-
Target
8fc286a964df88a232bb51b9c745e75f6a3b21313af2aeba2da96121ee03f7d3
-
Size
806KB
-
MD5
6e70baabe6caf2ec49303083bca1a2f0
-
SHA1
aeb5ac4161b7e4739915df9eb7d3e107773032c1
-
SHA256
8fc286a964df88a232bb51b9c745e75f6a3b21313af2aeba2da96121ee03f7d3
-
SHA512
6f6d7cbd017970258d9e56219d8b6a8fcf864f406e5d6b40abec4207faa72774543ca38caa33b2dc0ef010f21de548438869402a7bbcb2b3f352ca892df35ce3
-
SSDEEP
24576:O+XOGXs66Uj9odp2uKb4/+oIluyfVFCYB/B:jXOh6hBQp2ujxyD/B/B
Malware Config
Signatures
Files
-
8fc286a964df88a232bb51b9c745e75f6a3b21313af2aeba2da96121ee03f7d3.exe windows x86
0558e9e8631a18d6679906ab4b5664ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCurrentProcess
WriteFile
VirtualAlloc
SetHandleCount
CloseHandle
VirtualFree
DeleteCriticalSection
ExitProcess
GetCPInfo
HeapCreate
WriteConsoleA
GetModuleHandleW
GetStdHandle
GetLastError
LeaveCriticalSection
FreeEnvironmentStringsW
HeapReAlloc
InterlockedDecrement
GetEnvironmentStringsW
TlsGetValue
GetModuleHandleA
GetConsoleMode
QueryPerformanceCounter
GetCommandLineA
SetFilePointer
EnterCriticalSection
IsDebuggerPresent
GetEnvironmentStrings
GetFileType
UnhandledExceptionFilter
SetLastError
RaiseException
GetOEMCP
TerminateProcess
CreateFileA
IsValidCodePage
InterlockedIncrement
TlsFree
WriteConsoleW
GetConsoleOutputCP
MultiByteToWideChar
GetCurrentThreadId
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetConsoleCP
FlushFileBuffers
GetTickCount
GetStringTypeW
GetStartupInfoA
HeapFree
InitializeCriticalSectionAndSpinCount
GetProcAddress
HeapAlloc
SetUnhandledExceptionFilter
RtlUnwind
SetStdHandle
WideCharToMultiByte
Sleep
LCMapStringW
lstrlenA
GetProcessHeap
VirtualProtectEx
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
TlsAlloc
TlsSetValue
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
FreeEnvironmentStringsA
HeapSize
user32
SetMenu
PostMessageA
InvalidateRect
ValidateRect
DefWindowProcA
MessageBoxA
GetFocus
LoadIconA
GetDC
SetTimer
GetMessageA
SetWindowLongA
wsprintfA
GetWindowRect
SetWindowPos
DispatchMessageA
ShowWindow
PostQuitMessage
ReleaseDC
EnumDisplaySettingsA
LoadAcceleratorsA
TranslateAcceleratorA
LoadCursorA
EnumDisplayDevicesA
TranslateMessage
GetSystemMetrics
MoveWindow
RegisterClassA
CreateWindowExA
UpdateWindow
gdi32
ChoosePixelFormat
SwapBuffers
GetDeviceCaps
DescribePixelFormat
SetPixelFormat
shlwapi
PathAppendA
avifil32
AVIStreamInfoW
msvcrt
sprintf
Sections
.code Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cauco Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cauca Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ