Static task
static1
Behavioral task
behavioral1
Sample
8563027c13b8fa4c282063e34a6e7f64e2ee07b1fc5355f7c272c994dd7413a4.exe
Resource
win7-20220812-en
General
-
Target
8563027c13b8fa4c282063e34a6e7f64e2ee07b1fc5355f7c272c994dd7413a4
-
Size
417KB
-
MD5
848103edecfeabfd48134bccfd4235ec
-
SHA1
4bebf8de03e9efbd5c375ed52ace08863d42bd6a
-
SHA256
8563027c13b8fa4c282063e34a6e7f64e2ee07b1fc5355f7c272c994dd7413a4
-
SHA512
c4f2cd95b67da8f2dd9907ea6fa160834e05d2fa25bd2f00fe437190adefeee340d86deeadc52774258495d1b1b796a8596820aef2f984139f13b3d14ffc8b71
-
SSDEEP
3072:bgPD0L02gcFL/O/aIUlibfPaoKlckdrT:bAAHL/O/aZBlck
Malware Config
Signatures
Files
-
8563027c13b8fa4c282063e34a6e7f64e2ee07b1fc5355f7c272c994dd7413a4.exe windows x86
eba18dd11f7b6e3778fbb589c248d4a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
ReadProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetCommandLineW
GetModuleHandleW
GetStartupInfoW
user32
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
TranslateMessage
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
DispatchMessageA
RegisterClassExA
msvcrt
strrchr
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bztuxjo Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE