Static task
static1
Behavioral task
behavioral1
Sample
8f1f92fc40c5f979ae2ce5d12dc0d7e8ab93d91a16344db95c7a9c86a50e70a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f1f92fc40c5f979ae2ce5d12dc0d7e8ab93d91a16344db95c7a9c86a50e70a6.exe
Resource
win10v2004-20220812-en
General
-
Target
8f1f92fc40c5f979ae2ce5d12dc0d7e8ab93d91a16344db95c7a9c86a50e70a6
-
Size
582KB
-
MD5
602e6d3df7e8ce9dcd803ffe586ba5ea
-
SHA1
8019c2a6a710e2814c2e7121caffb0b7bdf4eb6f
-
SHA256
8f1f92fc40c5f979ae2ce5d12dc0d7e8ab93d91a16344db95c7a9c86a50e70a6
-
SHA512
a73c0394707f5948dff510b95fb9d4b2529c1eb4c0ef48a4a1ae78a0b30359b5823ae2977aafd091b74802f10a932a79da382a40cfd80097f65aa5f2ac7b7f33
-
SSDEEP
12288:Fq4103rw0nUenxDwqUQQNeR5fWZVuLCdjBJ56K:gXrw0nUenxDwqU8R8Z0LCdjBX6K
Malware Config
Signatures
Files
-
8f1f92fc40c5f979ae2ce5d12dc0d7e8ab93d91a16344db95c7a9c86a50e70a6.exe windows x86
3da9dce1f38086682f36c616c393e1f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleWindowInfo
GetModuleFileNameA
FindNextFileA
GetCurrentThreadId
lstrcpyA
FlushFileBuffers
CloseHandle
CreateFileW
GetStringTypeW
LCMapStringW
GetProfileStringA
WriteConsoleW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
HeapSize
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentDirectoryW
LoadLibraryA
FindClose
CopyFileA
GetProcAddress
lstrcmpiA
GetLastError
FindFirstFileA
GetStdHandle
lstrcatA
lstrlenA
GetConsoleWindow
GlobalAlloc
SetConsoleScreenBufferSize
InterlockedDecrement
HeapReAlloc
HeapCreate
GetModuleFileNameW
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
WriteFile
GetFileType
LeaveCriticalSection
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
TlsAlloc
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
GetModuleHandleW
ExitProcess
DecodePointer
HeapFree
HeapAlloc
GetDriveTypeW
GetFullPathNameA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
EncodePointer
RaiseException
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetStdHandle
EnterCriticalSection
user32
SetCaretPos
SetScrollInfo
GetWindowThreadProcessId
DrawFrameControl
SetWindowTextA
SetWindowRgn
GetWindowRect
AttachThreadInput
WindowFromPoint
GetClientRect
SendMessageA
EnumWindows
GetDC
GetCursorInfo
SetRect
SetWindowLongA
GetScrollInfo
InvalidateRect
GetWindowLongA
ReleaseDC
GetDlgItem
GetDesktopWindow
SetWindowPos
GetCursorPos
ShowWindow
SetMenu
DrawMenuBar
GetCursor
GetSystemMetrics
gdi32
DeleteDC
SetBrushOrgEx
CreateBitmap
DeleteObject
SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap
CreatePatternBrush
PatBlt
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
shell32
ShellExecuteA
SHAppBarMessage
oleaut32
SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString
winscard
SCardGetAttrib
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shlwapi
PathCompactPathA
PathFindFileNameA
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 421KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ