Static task
static1
Behavioral task
behavioral1
Sample
d8d8960d559306f4c326f82dcc6c9a62e2fb0dee1419407a14c7d348846aa7a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8d8960d559306f4c326f82dcc6c9a62e2fb0dee1419407a14c7d348846aa7a1.exe
Resource
win10v2004-20220901-en
General
-
Target
d8d8960d559306f4c326f82dcc6c9a62e2fb0dee1419407a14c7d348846aa7a1
-
Size
184KB
-
MD5
606bc357a70e21722f7a7a2a12e98fc0
-
SHA1
d1a7e5b6778fd3c59ba7353b0ce26acd343550ec
-
SHA256
d8d8960d559306f4c326f82dcc6c9a62e2fb0dee1419407a14c7d348846aa7a1
-
SHA512
2c03949ea2686146973630a636f98d1b0c39b38c5fd7cfac714f95f81aa2f91dc1dee92d676cec769dc1fe67dbe7e3aab9dbda3bffe2da2049cc807e2b74d796
-
SSDEEP
3072:Oq3P4H/4Yq6PTawb7F8fXZdDeY73Yba5KT9KijE5id:O6W5LByeYzTW9Ki1d
Malware Config
Signatures
Files
-
d8d8960d559306f4c326f82dcc6c9a62e2fb0dee1419407a14c7d348846aa7a1.exe windows x86
0169f87e6f9ee01e907aa840068e8659
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
FindFirstFileW
GetLastError
FindClose
FindNextFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetSystemTimeAsFileTime
msvcr80
exit
_wtoi
qsort
fflush
wcsftime
_wtoi64
wctomb
fputws
realloc
mbtowc
_strdup
putc
_errno
_read
_write
getc
strcmp
strncmp
strtod
strtol
isalnum
strrchr
sprintf
strlen
fprintf
fseek
_vsnprintf
_snprintf
memmove
memset
memcpy
_localtime32
_time32
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
ftell
wcsncpy
wcstok
fwrite
wprintf
calloc
fwprintf
fclose
_wsystem
fread
_wfopen
_snwprintf
_snwprintf_s
printf
malloc
free
__iob_func
_CIpow
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tlsnkpe Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE