Static task
static1
Behavioral task
behavioral1
Sample
8b2d2f9923945bc6e456e202a12309faebebc18a15c579680a5116fbe935f8d1.exe
Resource
win7-20220901-en
General
-
Target
8b2d2f9923945bc6e456e202a12309faebebc18a15c579680a5116fbe935f8d1
-
Size
82KB
-
MD5
7b4bd36dcc6f47d70d62264ffd8d6a60
-
SHA1
5de23510018cdc559c8f25927ed253f41e2fd2bb
-
SHA256
8b2d2f9923945bc6e456e202a12309faebebc18a15c579680a5116fbe935f8d1
-
SHA512
dda76007cc08d36b7b3d3cf9540b6c739e8c7ed866375da845e9c33f1cefb10c2213ebc4b0f48ae88931b97a1fff604fa4d7304363525dc3785965e35b34cbd6
-
SSDEEP
1536:4do9LFg+BCk02v5gR06xBh4kOYLb/DFFLKADZZGj6V:4do9LFg+Br/v5gR069q+bhFLhrs6V
Malware Config
Signatures
Files
-
8b2d2f9923945bc6e456e202a12309faebebc18a15c579680a5116fbe935f8d1.exe windows x86
023353eca5f1b57e86427a2ee77b1edf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
TerminateProcess
MultiByteToWideChar
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DeleteFileA
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
HeapDestroy
GetCPInfo
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
ShowWindow
CreateWindowExA
MessageBoxA
ExitWindowsEx
DefWindowProcA
DestroyWindow
PostQuitMessage
RegisterClassExA
LoadIconA
LoadCursorA
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE