Static task
static1
Behavioral task
behavioral1
Sample
8774cd085bbd0124d471eb75c083729940c8002a66040aa73398fc50ef8f2d95.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8774cd085bbd0124d471eb75c083729940c8002a66040aa73398fc50ef8f2d95.exe
Resource
win10v2004-20220901-en
General
-
Target
8774cd085bbd0124d471eb75c083729940c8002a66040aa73398fc50ef8f2d95
-
Size
206KB
-
MD5
69bae46fd217ea7f067f0c3b974a36df
-
SHA1
d06ace023ab603ea23e30310a2c9d532fe86495f
-
SHA256
8774cd085bbd0124d471eb75c083729940c8002a66040aa73398fc50ef8f2d95
-
SHA512
62912583587f53bed0e3f9be03b71308ce33098b10b1b424bfbf1a2b40f92a1ba2e1cd2ff616b59417439507033b7aa9863c750f132710622eb7041a331d530f
-
SSDEEP
3072:j8x4SYq62Y/g3p3NWq7Z70xeQkm7qL7HfpAprApaC/H+dbBxrCebJWAO1yzHBvvo:jbRgZ9WQmsrm5AEG+eebEWhvvo
Malware Config
Signatures
Files
-
8774cd085bbd0124d471eb75c083729940c8002a66040aa73398fc50ef8f2d95.exe windows x86
e15eae193f6423016c542127bed9c7f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
CreateFileA
WideCharToMultiByte
GetSystemDefaultLCID
MultiByteToWideChar
HeapFree
SetUnhandledExceptionFilter
GetLocaleInfoW
SetLastError
CloseHandle
GetEnvironmentStringsW
lstrlenA
FindResourceA
GetLocalTime
QueryPerformanceCounter
GetProcessHeap
lstrcpyA
lstrcmpA
GetVolumeInformationA
GetSystemTimeAsFileTime
FreeResource
GetOEMCP
LoadLibraryW
GetUserDefaultLCID
LockResource
LoadResource
QueryDosDeviceA
HeapAlloc
GetTickCount
GetCurrentProcess
GetCurrentProcessId
DeviceIoControl
advapi32
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
RegCloseKey
quartz
DllRegisterServer
DllUnregisterServer
DBToAmpFactor
AMGetErrorTextW
DllCanUnloadNow
DllGetClassObject
AMGetErrorTextA
AmpFactorToDB
user32
CharNextA
wsprintfA
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ