Static task
static1
Behavioral task
behavioral1
Sample
8e1fba58840cbd0c646bd33550db249547427ecf59487b9634aee969c6ec9fe8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8e1fba58840cbd0c646bd33550db249547427ecf59487b9634aee969c6ec9fe8.exe
Resource
win10v2004-20220901-en
General
-
Target
8e1fba58840cbd0c646bd33550db249547427ecf59487b9634aee969c6ec9fe8
-
Size
790KB
-
MD5
6d3b00adf825237e6f804ca8a26995c0
-
SHA1
ea66b569138a7c82abaddabaab84d538c73ebabd
-
SHA256
8e1fba58840cbd0c646bd33550db249547427ecf59487b9634aee969c6ec9fe8
-
SHA512
1208a84630ab7a3c3820ec7e26c1ac2d72879b435374a2db736f87a18c6f4bb888a3fd27a3e5d90529108b2b87e4d117ff27f5f9ef0877c516263323f83d7a8f
-
SSDEEP
12288:ju3YivmF80F6aED97SMRALWeFfotw0I5idFzXiHMvLpt7NXx0y4Lndl7W/2:ju3dmi0UB7SMeLWeGIsTXxLvREzdlA2
Malware Config
Signatures
Files
-
8e1fba58840cbd0c646bd33550db249547427ecf59487b9634aee969c6ec9fe8.exe windows x86
108cd4b7ddb07c812a3901a26af7161d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileAttributesW
lstrcatA
SetFileTime
LeaveCriticalSection
GetModuleHandleA
SetFileTime
lstrcpyA
FormatMessageW
GetFileSize
FindResourceA
InitializeCriticalSection
GetCurrentDirectoryW
IsBadStringPtrW
GetLocalTime
CreateMutexA
ReadFile
SetFileTime
CloseHandle
HeapCreate
GetStartupInfoW
GetLastError
msi
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
user32
IsDialogMessageA
DispatchMessageA
SetFocus
PeekMessageW
GetWindowLongW
PostMessageW
GetWindowRect
wsprintfW
GetWindowTextA
IsZoomed
IsWindow
LoadCursorW
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 775KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 211B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE