Static task
static1
Behavioral task
behavioral1
Sample
8cd5bd156e17fe1f16c0469e1082fb191e2a62d8904cce8716839d813abe8f35.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8cd5bd156e17fe1f16c0469e1082fb191e2a62d8904cce8716839d813abe8f35.exe
Resource
win10v2004-20220812-en
General
-
Target
8cd5bd156e17fe1f16c0469e1082fb191e2a62d8904cce8716839d813abe8f35
-
Size
18KB
-
MD5
61cbc9a895e7a7d0f29b259af0f20457
-
SHA1
2e88312855976209d18ef9e648481e18b32b7b61
-
SHA256
8cd5bd156e17fe1f16c0469e1082fb191e2a62d8904cce8716839d813abe8f35
-
SHA512
2cf925e21dc424551a68203bc3d56d581e37b829e3708a2002fed5c2d93e4f945b986ba420dc566953f6921223d7be90c43954d122f5174766f6380c898fd66d
-
SSDEEP
384:FB/UNCyWZgyEOD+W6HlWkkmK5A8oNBCXPFdMcseQ8CLlnzD/U:FJUpWsODS5WAfNwXnHse7CBzD/U
Malware Config
Signatures
Files
-
8cd5bd156e17fe1f16c0469e1082fb191e2a62d8904cce8716839d813abe8f35.exe windows x86
6520fc45a6d55f0dd542fdd30097ee44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
api-ms-win-service-core-l1-1-0
StartServiceCtrlDispatcherW
SetServiceStatus
api-ms-win-service-winsvc-l1-1-0
RegisterServiceCtrlHandlerW
api-ms-win-core-errorhandling-l1-1-0
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-interlocked-l1-1-0
InterlockedCompareExchange
InterlockedExchange
api-ms-win-core-libraryloader-l1-1-0
GetModuleHandleA
api-ms-win-core-misc-l1-1-0
Sleep
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0
CreateEventW
SetEvent
WaitForSingleObject
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE