Static task
static1
Behavioral task
behavioral1
Sample
8bd0f97cd6a11e3b7020d21db6f402fc58b79e88d6b82f02314936ce566d0ec7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bd0f97cd6a11e3b7020d21db6f402fc58b79e88d6b82f02314936ce566d0ec7.exe
Resource
win10v2004-20220812-en
General
-
Target
8bd0f97cd6a11e3b7020d21db6f402fc58b79e88d6b82f02314936ce566d0ec7
-
Size
300KB
-
MD5
7059286057fda817bc1954f50318d1b0
-
SHA1
0c0199ef189e9b35344c29438bc9e4df5fba2879
-
SHA256
8bd0f97cd6a11e3b7020d21db6f402fc58b79e88d6b82f02314936ce566d0ec7
-
SHA512
b0bdec0cddc8ecd0f125b8d928010fc98490646267f26d15957f9285f0fd605863a4ee8307be47541cadd4d5717bbd48366236689c9c5c76e8704ec8aac96be5
-
SSDEEP
6144:370WnH8KEsmcbCVSmX5YgiRmtQDo7sVLaqgxkUF:L7cKLmywSWYgiIWo7sVGqmkUF
Malware Config
Signatures
Files
-
8bd0f97cd6a11e3b7020d21db6f402fc58b79e88d6b82f02314936ce566d0ec7.exe windows x86
f4cd3a000cd0ad248406537e2ac5c49e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MapViewOfFile
SetLastError
CreateMailslotW
GetProcessHeap
CancelIo
GetModuleHandleA
IsBadWritePtr
VirtualProtect
HeapSize
GetLocaleInfoA
GetTickCount
FindResourceA
ResetEvent
FindClose
GetFileAttributesA
RemoveDirectoryA
GetExitCodeThread
GetFileAttributesA
IsValidCodePage
GetDriveTypeW
CreateDirectoryA
user32
PeekMessageA
GetWindowTextW
GetCapture
LoadImageW
IsWindow
GetWindowLongW
wsprintfA
IsDialogMessageA
LoadCursorA
SetCursor
DispatchMessageA
PostMessageW
SetFocus
ipsmsnap
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE