Static task
static1
Behavioral task
behavioral1
Sample
b8403f45ff2c48f9d37012d4e774cf91196552a2e6c3b345414284a11ca8349c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8403f45ff2c48f9d37012d4e774cf91196552a2e6c3b345414284a11ca8349c.exe
Resource
win10v2004-20220812-en
General
-
Target
b8403f45ff2c48f9d37012d4e774cf91196552a2e6c3b345414284a11ca8349c
-
Size
204KB
-
MD5
7d2711b50cf8b9f4102829fb46ab83e0
-
SHA1
20e7cbb4c059b882b86ba185c313578152a93be0
-
SHA256
b8403f45ff2c48f9d37012d4e774cf91196552a2e6c3b345414284a11ca8349c
-
SHA512
d23ea098f2a0e9bad6a74193d639ec173b0851750f9f3ce996a95f5945d9fc596ba733f68e8ff26a1a76b9a05eb5e81d90cda2ca9da52812d0d6e6548e9aec05
-
SSDEEP
3072:ThFyGbo+Ngg1/6H8QY6DDBWBnK0UnlXy7CwuPg5YZF0sH:ThYGb7NF6H8n6WZR85PgG
Malware Config
Signatures
Files
-
b8403f45ff2c48f9d37012d4e774cf91196552a2e6c3b345414284a11ca8349c.exe windows x86
4e7646f184ae1843ba85bfbd0f929fe5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SuspendThread
GetCurrentThread
ExitProcess
user32
SetForegroundWindow
core
?free@MemoryMgr@@QAEHHPAX@Z
file
?setLocalePath@File@@YAXPBD@Z
ui2
?getType@uiRadioGroup@@UAEPBDXZ
snd3d
?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z
gfx2d
?moveWindow@gfxSubsystem@@QAEXXZ
logger
?log@udLogger@@SAXHPBDZZ
msvcr71
_snprintf
dsetup
ord11
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zylms Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zylmi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE