Static task
static1
Behavioral task
behavioral1
Sample
8c8639234c124e3a3c4fe0a28c0ca5de39039dd045e3c66d6b0bde67e54a6262.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c8639234c124e3a3c4fe0a28c0ca5de39039dd045e3c66d6b0bde67e54a6262.exe
Resource
win10v2004-20220812-en
General
-
Target
8c8639234c124e3a3c4fe0a28c0ca5de39039dd045e3c66d6b0bde67e54a6262
-
Size
62KB
-
MD5
755dcaf5caf2336badf894c3759b7e80
-
SHA1
3162183c5ea4e40259c5c91df300295639863d58
-
SHA256
8c8639234c124e3a3c4fe0a28c0ca5de39039dd045e3c66d6b0bde67e54a6262
-
SHA512
2681d7e7954d91d719c4ddf1a8fe9c16853dc6f0a127c115ef672d794c1e77e499b7873230f4d5dc92211cd8c346cb5ba99782770867d2bc20bea75ffd0f7ef7
-
SSDEEP
1536:K2LvvcGJBixuW7dPjQlfSFIsO+aOKcLllWLM2:K2zcGJBibDJvMM
Malware Config
Signatures
Files
-
8c8639234c124e3a3c4fe0a28c0ca5de39039dd045e3c66d6b0bde67e54a6262.exe windows x86
573066823f761f123ba4cc862787084a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
DialogBoxParamA
EndDialog
GetClassWord
GetKeyboardLayout
SetClassLongW
imm32
ImmAssociateContext
userenv
ExpandEnvironmentStringsForUserA
GetGPOListA
FreeGPOListW
RefreshPolicy
GetAllUsersProfileDirectoryA
GetAppliedGPOListA
GetUserProfileDirectoryA
GetAppliedGPOListW
GetDefaultUserProfileDirectoryA
CreateEnvironmentBlock
UnregisterGPNotification
kernel32
InitializeCriticalSection
InterlockedDecrement
GetProcAddress
IsDebuggerPresent
FileTimeToDosDateTime
GetPriorityClass
AssignProcessToJobObject
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 939B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE