Static task
static1
Behavioral task
behavioral1
Sample
c8e8fb818d1e33b96d6bef7c308a3afaf2fdef9e5c398b858dc12b3515450b54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8e8fb818d1e33b96d6bef7c308a3afaf2fdef9e5c398b858dc12b3515450b54.exe
Resource
win10v2004-20220812-en
General
-
Target
c8e8fb818d1e33b96d6bef7c308a3afaf2fdef9e5c398b858dc12b3515450b54
-
Size
344KB
-
MD5
af64e56cb5b0679b72f65cf6e94b8cc0
-
SHA1
b19faedff772aaa795a27186100140ff6506dc68
-
SHA256
c8e8fb818d1e33b96d6bef7c308a3afaf2fdef9e5c398b858dc12b3515450b54
-
SHA512
8871756282bbe39d888b424ee920ac85644f6b0dd0a52ffd454ff98d516effc9aa067a3e6762731803d277f4869dc20adf22aa352d48651f5c9ba1a6ea61d37f
-
SSDEEP
6144:CFJ9jhfI1XAb2hxP9vyO5iIp81zCncEvqmcn0x72ywiJf:CFfhfI1XzhhyKiIyBCnS3052uf
Malware Config
Signatures
Files
-
c8e8fb818d1e33b96d6bef7c308a3afaf2fdef9e5c398b858dc12b3515450b54.exe windows x86
c48809f20521381e37f236c63137e821
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockFile
GetUserDefaultLangID
UnmapViewOfFile
FoldStringW
GetCurrentProcessId
ExpandEnvironmentStringsW
VirtualProtect
ClearCommError
IsBadWritePtr
GetVersionExA
ExitProcess
GetCommandLineA
CompareFileTime
ReadConsoleOutputAttribute
ResumeThread
WaitNamedPipeW
GetThreadLocale
CreateProcessW
SetWaitableTimer
GetFileInformationByHandle
ConvertThreadToFiber
InterlockedExchangeAdd
WaitForSingleObjectEx
WritePrivateProfileSectionA
SetMailslotInfo
GetACP
CreateEventW
lstrcatW
GetLogicalDrives
OutputDebugStringA
SetThreadPriorityBoost
QueryDosDeviceA
GetCurrentDirectoryA
GetSystemTimeAsFileTime
GetSystemDefaultLCID
GetLogicalDriveStringsW
EnumDateFormatsW
user32
CreateCaret
ReleaseDC
EnumDisplaySettingsW
ShowOwnedPopups
GetMenuItemInfoA
MessageBoxW
DestroyIcon
SetWindowRgn
CreateMDIWindowW
SetClassLongA
TrackPopupMenuEx
GetKeyboardType
EmptyClipboard
GetCursorPos
GetClipboardSequenceNumber
SetProcessWindowStation
CreateDialogIndirectParamA
CheckMenuRadioItem
SystemParametersInfoA
gdi32
Chord
GetOutlineTextMetricsW
StretchDIBits
CloseMetaFile
GetFontLanguageInfo
DeleteEnhMetaFile
GetLayout
CreatePenIndirect
SelectPalette
SetGraphicsMode
PolyBezier
GetViewportOrgEx
PlayMetaFile
ExtTextOutW
RealizePalette
StartDocW
comdlg32
ChooseFontW
ChooseColorA
ChooseColorW
PrintDlgW
advapi32
ImpersonateLoggedOnUser
RegEnumKeyW
GetLengthSid
RevertToSelf
RegConnectRegistryW
CryptDestroyHash
GetServiceKeyNameW
InitiateSystemShutdownA
OpenSCManagerW
AccessCheckAndAuditAlarmA
CryptHashData
LookupPrivilegeDisplayNameA
RegUnLoadKeyA
SetSecurityDescriptorSacl
OpenSCManagerA
RegEnumKeyExA
GetSidIdentifierAuthority
CryptAcquireContextA
GetSecurityDescriptorSacl
BuildTrusteeWithNameW
AddAccessDeniedAce
CryptEncrypt
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
SetFileSecurityA
CreatePrivateObjectSecurity
ControlService
GetUserNameA
ClearEventLogW
BuildSecurityDescriptorW
CryptGetKeyParam
RegSetValueExA
RegEnumValueA
QueryServiceObjectSecurity
GetAclInformation
RegCloseKey
IsValidSid
GetSecurityDescriptorDacl
ole32
OleSetMenuDescriptor
OleCreateLinkToFile
OleDestroyMenuDescriptor
FreePropVariantArray
CoQueryClientBlanket
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_GetBkColor
PropertySheetW
ImageList_SetDragCursorImage
ImageList_Destroy
shlwapi
UrlCreateFromPathW
PathUnquoteSpacesW
SHSetValueA
StrDupW
SHCopyKeyW
PathFindOnPathW
StrTrimW
StrRStrIW
PathIsDirectoryW
StrCatBuffA
PathAppendA
wvnsprintfW
SHRegWriteUSValueW
PathUndecorateW
setupapi
SetupDiGetClassDescriptionW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
Sections
.text Size: 296KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE