Static task
static1
Behavioral task
behavioral1
Sample
8d6cae5763654a9797e96f472f0d352754ba73926bfd5f797cd22e6c5ab57505.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d6cae5763654a9797e96f472f0d352754ba73926bfd5f797cd22e6c5ab57505.exe
Resource
win10v2004-20220812-en
General
-
Target
8d6cae5763654a9797e96f472f0d352754ba73926bfd5f797cd22e6c5ab57505
-
Size
215KB
-
MD5
3023a408403fa75ea6e4fd473180a0e0
-
SHA1
6c2d110e6a188d58611eefe39524a836aa6c75a4
-
SHA256
8d6cae5763654a9797e96f472f0d352754ba73926bfd5f797cd22e6c5ab57505
-
SHA512
9b17648be7276762333bfa10280e4c825810d75e24dbe03dcab28a2507b0a9a55dace10114d1f74bf194a6b54a55e0e2441cc9709ae6383ff95c6208f000fcf1
-
SSDEEP
6144:S4aVYfFL3RCxU4ryiYBE+EJR5WkR1O58Xqoye2oa:KVykxUoFAkXO5vua
Malware Config
Signatures
Files
-
8d6cae5763654a9797e96f472f0d352754ba73926bfd5f797cd22e6c5ab57505.exe windows x86
10bdab2e7aa9257d86aea72509147bff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
scecli
SceCloseProfile
SceAnalyzeSystem
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceBrowseDatabaseTable
SceAddToObjectList
kernel32
lstrcmpA
LoadLibraryW
GetLocaleInfoA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetLocalTime
GetCurrentProcess
CloseHandle
SetLastError
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateFileA
SystemTimeToFileTime
GetOEMCP
FindResourceA
GetTickCount
HeapAlloc
HeapFree
QueryPerformanceCounter
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 8KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ