Static task
static1
Behavioral task
behavioral1
Sample
8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe
Resource
win10v2004-20220901-en
General
-
Target
8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802
-
Size
1.3MB
-
MD5
6507f36b1e9f007c60e3300899e216b0
-
SHA1
5aa11403950e4b2b3d946ff8a79336a69227bc2d
-
SHA256
8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802
-
SHA512
e2d34bf6332deac34c9844e328aa9be1965c9faef160aee6f3e7ccb9ea97118e9d6ecdc2e6dca212fbafc9602e04aae6b60a754a77e7bb1b8994bc4120b41449
-
SSDEEP
6144:hY0OVvYXqGHfdicJ2aG09wQZ2nI159Xomv3Uxf2eX:z6G/gcdM+2iTomv8+G
Malware Config
Signatures
Files
-
8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe windows x86
2a1facc222207c1843e4600029695191
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetCurrentProcessId
ExitProcess
GetProcAddress
GetCurrentThreadId
WriteFile
LoadLibraryA
GetCommandLineA
HeapAlloc
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
RtlUnwind
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
advapi32
OpenProcessToken
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ