Static task
static1
Behavioral task
behavioral1
Sample
f8794a1253dc1792f11f32988b430d9768e8dd01adcb24640b7be7616ba62b78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8794a1253dc1792f11f32988b430d9768e8dd01adcb24640b7be7616ba62b78.exe
Resource
win10v2004-20220901-en
General
-
Target
f8794a1253dc1792f11f32988b430d9768e8dd01adcb24640b7be7616ba62b78
-
Size
570KB
-
MD5
9395748f889b64530ca775af6aa2a52f
-
SHA1
3e09844866943075bd1fa28940c699977b20dd82
-
SHA256
f8794a1253dc1792f11f32988b430d9768e8dd01adcb24640b7be7616ba62b78
-
SHA512
10caa06e57bba40dbe0e34f023f6a140930c2a2c387b21536c0b115262b8f4b28e7aa6c9c986890a8f717c88d358550e1ea421a79a64a75d9e19eeb783e8419c
-
SSDEEP
12288:IzhLAghOoHMYCk0tTFm5laupFkG+i7Er6O:MhL9sYCkaA5rFk/i7Er6
Malware Config
Signatures
Files
-
f8794a1253dc1792f11f32988b430d9768e8dd01adcb24640b7be7616ba62b78.exe windows x86
afabdff2ac258076b06fa8dc118f473f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
gdi32
SetViewportExtEx
PolyPolygon
wininet
InternetOpenUrlA
kernel32
GetDateFormatA
lstrlen
TlsSetValue
SetConsoleCtrlHandler
VirtualFree
DeleteCriticalSection
MultiByteToWideChar
LockFileEx
HeapCreate
InterlockedIncrement
LCMapStringW
GetStartupInfoW
TlsFree
WaitForMultipleObjects
GetStringTypeA
RtlUnwind
HeapAlloc
GetStdHandle
GetCurrentProcess
GetTimeZoneInformation
MoveFileW
LocalReAlloc
LCMapStringA
GetFileType
TlsGetValue
ExitProcess
FreeEnvironmentStringsW
TlsAlloc
GetTimeFormatA
GetCommandLineA
GetLocaleInfoA
GetEnvironmentStringsW
GetCurrentProcessId
SetEnvironmentVariableA
SetLastError
CompareStringA
GetCurrentThread
GetConsoleMode
EnterCriticalSection
SetUnhandledExceptionFilter
GetConsoleCP
HeapDestroy
CompareStringW
VirtualAlloc
GetProcAddress
GetCPInfo
GetModuleFileNameA
HeapReAlloc
VirtualQuery
IsValidLocale
EnumCalendarInfoA
WriteFile
InterlockedExchange
GetCurrentThreadId
GetCommandLineW
WriteConsoleA
WaitForSingleObject
IsDebuggerPresent
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetLastError
GetUserDefaultLCID
CreateMutexA
FlushFileBuffers
GetStartupInfoA
ReadFile
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
IsBadReadPtr
GetACP
GetOEMCP
FreeLibrary
GetModuleHandleA
GetNumberFormatA
Sleep
HeapSize
OpenMutexA
InterlockedDecrement
GetSystemTimeAsFileTime
WideCharToMultiByte
LeaveCriticalSection
LoadLibraryA
IsValidCodePage
SetHandleCount
SetFilePointer
GetConsoleOutputCP
WriteConsoleW
EnumSystemLocalesA
CloseHandle
HeapFree
QueryPerformanceCounter
TerminateProcess
SetStdHandle
GetModuleHandleW
GetModuleFileNameW
CreateFileA
GetTickCount
GetStringTypeW
comctl32
ImageList_SetOverlayImage
ImageList_GetFlags
ImageList_SetFilter
GetEffectiveClientRect
CreateStatusWindow
ImageList_BeginDrag
ImageList_GetBkColor
ImageList_Remove
InitCommonControlsEx
ImageList_LoadImageA
ImageList_Create
ImageList_GetIconSize
CreateStatusWindowW
CreatePropertySheetPage
user32
GetDesktopWindow
CreateWindowExW
ShowWindow
CascadeChildWindows
EnumDisplayDevicesW
SetForegroundWindow
SetThreadDesktop
EnumDesktopsA
RegisterClassExA
LoadKeyboardLayoutA
CallNextHookEx
GetOpenClipboardWindow
GetWindowModuleFileNameA
OffsetRect
RemovePropW
GetTitleBarInfo
DestroyCaret
GetCursor
GetTabbedTextExtentW
RegisterClassA
MessageBoxW
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ