Static task
static1
Behavioral task
behavioral1
Sample
8cf53433c87ef8efc7a420347d3d254738cc9c598f36c46678714a816230cca9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cf53433c87ef8efc7a420347d3d254738cc9c598f36c46678714a816230cca9.exe
Resource
win10v2004-20220812-en
General
-
Target
8cf53433c87ef8efc7a420347d3d254738cc9c598f36c46678714a816230cca9
-
Size
96KB
-
MD5
a3a2970bad0c1ba992853b2b267f0270
-
SHA1
da5be4fae17e9e3d1f50436fa4933e1ed4fff172
-
SHA256
8cf53433c87ef8efc7a420347d3d254738cc9c598f36c46678714a816230cca9
-
SHA512
5da0c75f1682dc5a0a9578c62cd07c57cafcd1b27513559f6a92ea6b8c9eb82ba3d7926a06a5ce459203e1e9a4c7a1569f61924cc86e8a2db661effc131b0ef5
-
SSDEEP
1536:g1qDYxkx/nVyxRq+cH2sKdz9lydF033OnXfP8jUOr3+C8xt:0qDYSxvsfddz9lydS3ZjUOaC8x
Malware Config
Signatures
Files
-
8cf53433c87ef8efc7a420347d3d254738cc9c598f36c46678714a816230cca9.exe windows x86
d4c0296f315c1b5d42127e7348a7ef37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??3@YAXPAX@Z
__p__commode
_mbsrchr
vsprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
??2@YAPAXI@Z
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atol
atof
sprintf
_ftol
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
CreateThread
OutputDebugStringA
WriteFile
FatalAppExitA
SetFilePointer
SetConsoleTitleA
AllocConsole
GetStdHandle
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrlenA
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCurrentThreadId
CloseHandle
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
lstrcpynA
MulDiv
GetDiskFreeSpaceA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFullPathNameA
GetFileSize
CreateFileA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
OpenFile
WriteProfileStringA
GetProfileIntA
GetProfileStringA
GetStartupInfoA
WaitForSingleObject
gdi32
DeleteObject
PatBlt
CreateSolidBrush
ExtTextOutA
GetStockObject
SelectObject
CreateFontA
GetTextMetricsA
SetBkColor
SetTextColor
user32
EndPaint
BeginPaint
GetAsyncKeyState
ShowWindow
MoveWindow
LoadIconA
InvalidateRect
GetDC
DefWindowProcA
PostQuitMessage
LoadCursorA
LoadAcceleratorsA
WaitMessage
TranslateAcceleratorA
GetSysColor
GetWindowLongA
GetWindowTextA
GetDlgItemInt
RegisterClassA
IsCharAlphaA
SetDlgItemTextA
CheckDlgButton
DialogBoxParamA
EndDialog
wvsprintfA
MessageBoxA
wsprintfA
GetMenu
GetSubMenu
RemoveMenu
CheckMenuItem
GetSystemMetrics
GetWindowRect
SetWindowPos
SetWindowTextA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
UpdateWindow
GetDlgItem
IsCharAlphaNumericA
SetDlgItemInt
EnableWindow
SetFocus
MessageBeep
KillTimer
GetMenuItemCount
EnableMenuItem
GetDlgItemTextA
SetTimer
IsDlgButtonChecked
CreateWindowExA
ReleaseDC
CreatePopupMenu
AppendMenuA
GetClientRect
winmm
timeGetTime
comdlg32
GetOpenFileNameA
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
MkParseDisplayName
CreateBindCtx
CoInitialize
CoTaskMemAlloc
oleaut32
OleCreatePropertyFrame
SysFreeString
msacm32
acmMetrics
acmFormatChooseA
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmpbenx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE