Static task
static1
Behavioral task
behavioral1
Sample
8bf1ec4228f5051a206ecb0ab5a828afe083fb7ff841f54d64c491c70eecee21.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bf1ec4228f5051a206ecb0ab5a828afe083fb7ff841f54d64c491c70eecee21.exe
Resource
win10v2004-20220901-en
General
-
Target
8bf1ec4228f5051a206ecb0ab5a828afe083fb7ff841f54d64c491c70eecee21
-
Size
64KB
-
MD5
07d56f09a87d18b44764cf9e055b6f0f
-
SHA1
582b729a673be87511e340ba5748c51791a1e3a0
-
SHA256
8bf1ec4228f5051a206ecb0ab5a828afe083fb7ff841f54d64c491c70eecee21
-
SHA512
29715adf1b0c7666a4e2170d2472ef170da312e9b9d24322704f4d624bf578011e3e72710c8a5ed1ebf676a2f671dc491c9172da5d32b76f7cb6dc67f4cd9312
-
SSDEEP
768:3MZDmV5VT/HMHvckiQzJt4zmkzCk5gd0HQfGRr5aKiB9JutYQ7+y4Ltihp:3umV5VT/gJCzAkm0HQKr5aEY5Dtif
Malware Config
Signatures
Files
-
8bf1ec4228f5051a206ecb0ab5a828afe083fb7ff841f54d64c491c70eecee21.exe windows x86
19c5de3cb7a2bda6ba0461ea50d6e44e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetProcAddress
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle
user32
wsprintfA
MessageBoxA
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ