Static task
static1
Behavioral task
behavioral1
Sample
8ff8848a3a9d1d2a687850a8c934f25832ef7e4d824fe3adbc1d89653426020e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ff8848a3a9d1d2a687850a8c934f25832ef7e4d824fe3adbc1d89653426020e.exe
Resource
win10v2004-20220812-en
General
-
Target
8ff8848a3a9d1d2a687850a8c934f25832ef7e4d824fe3adbc1d89653426020e
-
Size
556KB
-
MD5
90278e91235594401da73eb56b759830
-
SHA1
144dd79f71e5753e691f3562964e2ee02481cc8f
-
SHA256
8ff8848a3a9d1d2a687850a8c934f25832ef7e4d824fe3adbc1d89653426020e
-
SHA512
3cecaea0e58eb6b636a5aa1d799c9540fae02067bb5a2a758daaa88185815c5e6a265a6270baa04009206319a8cce62f0fee9dc896f130c913d485e0c11c7559
-
SSDEEP
12288:Nfrlj+freuBRyQnifOq8WW3kMuIyADLhi8N3QOY7KaTGb4X+R:hrQeuSnmq8jkMTPJZ0qb4X+R
Malware Config
Signatures
Files
-
8ff8848a3a9d1d2a687850a8c934f25832ef7e4d824fe3adbc1d89653426020e.exe windows x86
0913868766dba470bb40061cf337e9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectA
DeleteDC
GetStockObject
GetDeviceCaps
SetBkMode
SelectObject
SetBkColor
SetTextColor
BitBlt
CreateSolidBrush
kernel32
GetProcAddress
SetEndOfFile
CreateDirectoryA
SetLastError
GetStringTypeW
lstrcpyA
GetCommandLineA
lstrcpynA
GetSystemTimeAsFileTime
HeapDestroy
TerminateProcess
SetStdHandle
CreateProcessA
FlushFileBuffers
FindNextFileW
GetCurrentProcess
GetCurrentThread
Sleep
DeleteCriticalSection
UnhandledExceptionFilter
GetConsoleMode
FreeLibrary
LoadLibraryA
InterlockedDecrement
InitializeCriticalSection
SetUnhandledExceptionFilter
GetCommandLineW
GlobalFree
GetModuleHandleW
FileTimeToSystemTime
GetExitCodeProcess
GetStdHandle
HeapFree
IsValidCodePage
DeleteFileW
IsDebuggerPresent
RaiseException
DeleteFileA
LocalAlloc
FileTimeToLocalFileTime
QueryPerformanceCounter
ReleaseMutex
SetEnvironmentVariableA
WriteFile
LeaveCriticalSection
CreateFileW
GetStartupInfoA
EnterCriticalSection
WriteConsoleW
MapViewOfFile
GetCurrentProcessId
CreateThread
GetTimeZoneInformation
GetFileSize
GetVersion
LockResource
GlobalAlloc
SetErrorMode
GetOEMCP
CloseHandle
FindFirstFileW
FindClose
FormatMessageA
GetModuleFileNameW
SetFilePointer
InterlockedIncrement
LoadLibraryW
TlsSetValue
HeapAlloc
GetFileAttributesW
HeapCreate
GetLastError
CompareStringA
lstrcmpiA
GetPrivateProfileStringA
GetCPInfo
GetConsoleOutputCP
CreateEventA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsFree
WaitForSingleObject
VirtualFree
TlsAlloc
VirtualAlloc
GetTempPathA
VirtualQuery
HeapReAlloc
GetCurrentDirectoryA
GetStringTypeA
SizeofResource
LoadLibraryExW
VirtualProtect
HeapSize
TlsGetValue
GetConsoleCP
GetFileType
CreateFileA
GetWindowsDirectoryA
MultiByteToWideChar
lstrlenW
GetACP
GetSystemDirectoryA
CompareStringW
LCMapStringW
GetModuleFileNameA
GlobalLock
LoadResource
ReadFile
FormatMessageW
GetCurrentThreadId
GetFullPathNameA
GetFileAttributesA
GetProcessHeap
SetEvent
CreateEventW
WriteConsoleA
FindNextFileA
GetLocaleInfoA
GetLocaleInfoW
ExpandEnvironmentStringsA
SetHandleCount
GetThreadLocale
lstrlenA
GetModuleHandleA
WideCharToMultiByte
LCMapStringA
GetSystemInfo
GetVersionExA
FreeEnvironmentStringsA
GetEnvironmentStrings
ExitProcess
InterlockedExchange
GetLocalTime
UnmapViewOfFile
LocalFree
OutputDebugStringA
ole32
OleInitialize
OleUninitialize
user32
IsWindowVisible
ReleaseCapture
DefWindowProcA
IsWindowEnabled
GetWindowRect
DestroyWindow
EnableMenuItem
SetWindowLongA
ReleaseDC
GetSysColor
MapWindowPoints
FillRect
LoadStringA
EndDialog
GetClientRect
CheckMenuItem
MessageBoxA
GetDC
SetForegroundWindow
GetParent
SetFocus
GetWindowLongA
GetSystemMetrics
GetDlgItem
CreateWindowExA
SetWindowTextA
DestroyMenu
RegisterClassA
EndPaint
EnableWindow
SetWindowPos
UpdateWindow
ScreenToClient
TranslateMessage
LoadIconA
ShowWindow
SendMessageA
PeekMessageA
GetCursorPos
PostQuitMessage
SetTimer
SetCursor
DispatchMessageA
BeginPaint
IsWindow
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegSetValueExW
msvcrt
_strcmpi
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free
_controlfp
Sections
.text Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ