Static task
static1
Behavioral task
behavioral1
Sample
a8c8729e8ed9cf101dc3dd731acac0244a936b93505466e8272637656e30b8d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8c8729e8ed9cf101dc3dd731acac0244a936b93505466e8272637656e30b8d9.exe
Resource
win10v2004-20220812-en
General
-
Target
a8c8729e8ed9cf101dc3dd731acac0244a936b93505466e8272637656e30b8d9
-
Size
28KB
-
MD5
0bbeeb00b2101be27d704d07263d5d51
-
SHA1
39b3c7dad4b5f5d56f7596413f68ce9a80e65901
-
SHA256
a8c8729e8ed9cf101dc3dd731acac0244a936b93505466e8272637656e30b8d9
-
SHA512
9bfbb1d4fb20e261bb6cf4740cb0aee075fc6004d66afdf81ac30b635f8bd75ff32af5e906407f56fcedb9923470ad21bf0f544d1a1ff8e0ffe9aceee7aea932
-
SSDEEP
768:6W5/6qScZignFcjjIfIDmKozHkzROisFuRoM/:L5/6qvZignCEvpI9sIl/
Malware Config
Signatures
Files
-
a8c8729e8ed9cf101dc3dd731acac0244a936b93505466e8272637656e30b8d9.exe windows x86
18fcbaaa92428212e770f4e4b8af371d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrcpyW
ResumeThread
CloseHandle
WTSGetActiveConsoleSessionId
GetProcAddress
lstrcatA
ExitProcess
GetProcessHeap
OutputDebugStringW
SetUnhandledExceptionFilter
HeapAlloc
lstrlenA
SwitchToThread
ntdll
vsprintf
NtAllocateVirtualMemory
memcpy
opengl32
glVertex3d
user32
GetMessageW
EndPaint
ShowWindow
UpdateWindow
ValidateRect
DefWindowProcW
DispatchMessageW
BeginPaint
TranslateMessage
RegisterClassExW
CreateWindowExW
gdi32
CreateFontIndirectA
SelectObject
Rectangle
Ellipse
CreatePen
LineTo
SetTextColor
TextOutW
advapi32
DuplicateTokenEx
RegCloseKey
RegOpenKeyA
RegQueryValueA
comctl32
ord17
imagehlp
MapFileAndCheckSumW
wtsapi32
WTSQueryUserToken
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.we Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ