Static task
static1
Behavioral task
behavioral1
Sample
8a9fedc863aa667a38305d85df24541485c547282eb4dd773ca5246e6f803a1e.exe
Resource
win7-20220812-en
General
-
Target
8a9fedc863aa667a38305d85df24541485c547282eb4dd773ca5246e6f803a1e
-
Size
917KB
-
MD5
730fe6f4d087b887b087f0abee9ec610
-
SHA1
dee2ff39996a72329a8d728ec03ec50bc4e35b07
-
SHA256
8a9fedc863aa667a38305d85df24541485c547282eb4dd773ca5246e6f803a1e
-
SHA512
3294194beea6d9de8ddd9e26652a69881d732bd71bcb2aeea0ff4c90a1632896595342a7c3610dafc9f6e0cabe99645e01bf84cbfe9e2eb82a80b8e1530276d2
-
SSDEEP
24576:z5aFicEKSLaY95zaEDIU2HmusYw8Fah6XqkHo:zSEKEans3E1scaE60o
Malware Config
Signatures
Files
-
8a9fedc863aa667a38305d85df24541485c547282eb4dd773ca5246e6f803a1e.exe windows x86
3f35115a995406ab57e0afcc97b046f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupIterateCabinetW
ole32
CoUninitialize
CoInitializeEx
shell32
ShellExecuteExW
ShellExecuteW
user32
MessageBoxW
wsprintfW
kernel32
FreeLibrary
ExitProcess
GetStartupInfoW
LockResource
SetEnvironmentVariableW
CreateFileW
LoadLibraryA
GetModuleFileNameW
lstrcpyW
WriteFile
VerSetConditionMask
WaitForSingleObject
GetCommandLineW
GetTempPathW
SizeofResource
FindResourceW
GetLastError
GetModuleHandleW
GetProcAddress
LoadResource
GetExitCodeProcess
CloseHandle
DeleteFileW
Sections
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 900KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE