Static task
static1
Behavioral task
behavioral1
Sample
8218ab2ca6d4f354f741272533c5b789bf82f08ef55ef9a42bca6ca358b8b120.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8218ab2ca6d4f354f741272533c5b789bf82f08ef55ef9a42bca6ca358b8b120.exe
Resource
win10v2004-20220812-en
General
-
Target
8218ab2ca6d4f354f741272533c5b789bf82f08ef55ef9a42bca6ca358b8b120
-
Size
425KB
-
MD5
a165d1383059d2f5e877cccb9007b300
-
SHA1
467140dbcab6e88a93331cce7807eb7b0837a4a5
-
SHA256
8218ab2ca6d4f354f741272533c5b789bf82f08ef55ef9a42bca6ca358b8b120
-
SHA512
2b99fe91a2fa12db740c41aaadb43556fda786a224cb13883740920520dd04ef5253bf5471fdcdbdeaa5ef178a318b1b4948e6123383354e9ff60b217f41fae2
-
SSDEEP
6144:SNOzGr0r7eP/pppW+BrStq5BWvB0olRfmJfmhAOE3VanvOsI7RoStuxoPO4Sp:SNOzG0raZ3P5BWZLvfJhARaJew148
Malware Config
Signatures
Files
-
8218ab2ca6d4f354f741272533c5b789bf82f08ef55ef9a42bca6ca358b8b120.exe windows x86
19b4e1e58ea460b71b009a5a610b79a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
lstrcpyA
SwitchToThread
GetModuleHandleW
GetProcAddress
RtlMoveMemory
TerminateProcess
WaitForSingleObject
SetUnhandledExceptionFilter
HeapAlloc
SetErrorMode
CreateThread
ExitProcess
GetStartupInfoW
msvcrt
_except_handler3
_controlfp
_exit
_XcptFilter
__set_app_type
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
user32
FindWindowW
SetFocus
TranslateMessage
DestroyWindow
SetWindowPos
ShowWindow
UpdateWindow
DefWindowProcW
DispatchMessageW
CreateWindowExA
GetMessageW
wintrust
WintrustGetRegPolicyFlags
imagehlp
MapFileAndCheckSumW
ImageEnumerateCertificates
Sections
.text Size: 421KB - Virtual size: 421KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE