Static task
static1
Behavioral task
behavioral1
Sample
e8fc1ef6ec07780cb002023d0f481bc353ff6cbd0fcf43c6f970c10c37818692.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8fc1ef6ec07780cb002023d0f481bc353ff6cbd0fcf43c6f970c10c37818692.exe
Resource
win10v2004-20220812-en
General
-
Target
e8fc1ef6ec07780cb002023d0f481bc353ff6cbd0fcf43c6f970c10c37818692
-
Size
636KB
-
MD5
7c51bc3ab699475e2ca6e77d2fe11930
-
SHA1
cc5221535309cfe53d3de6d13aa970072bd7bb68
-
SHA256
e8fc1ef6ec07780cb002023d0f481bc353ff6cbd0fcf43c6f970c10c37818692
-
SHA512
018076f8aeba05760bf7d98e7bfbd4bc7966fb85cd78d7d61d9e4da7ecab20680334d945aea11c911ea509ab0d03b8de9c8bcc7683debf4e8a67d3369a3df717
-
SSDEEP
12288:YmFhr395JN/RHya7lDSyQIOBA5AmyG3sOOmUzCoS1vsIfjm:YIhfb/RSaxD5/OBA5AmyQsOtUmHlfj
Malware Config
Signatures
Files
-
e8fc1ef6ec07780cb002023d0f481bc353ff6cbd0fcf43c6f970c10c37818692.exe windows x86
bf92b964532f4227e479776ec1ec6e5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
LoadLibraryExA
WaitForSingleObject
LocalLock
HeapReAlloc
GetAtomNameA
ResumeThread
GlobalSize
SetLastError
GetUserDefaultLangID
GetModuleHandleA
GetConsoleCP
lstrlenA
WaitForSingleObject
VirtualProtect
InterlockedExchange
GetVersion
HeapCreate
GetConsoleDisplayMode
GetSystemTime
GetCommandLineA
user32
GetCursorPos
CreateIcon
FrameRect
wsprintfA
AnyPopup
ShowWindow
GetWindow
EndPaint
BeginPaint
GetClassNameA
DrawTextA
GetFocus
GetDC
GetParent
SetForegroundWindow
FillRect
DragDetect
GetTitleBarInfo
ReleaseDC
ntshrui
DllCanUnloadNow
GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
DllGetClassObject
msacm32
acmFilterEnumA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ