Static task
static1
Behavioral task
behavioral1
Sample
8ba0fe9b709ee1d025d3932ba550f86aa4a3110e1652690eaaebd1e8f98296aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ba0fe9b709ee1d025d3932ba550f86aa4a3110e1652690eaaebd1e8f98296aa.exe
Resource
win10v2004-20220812-en
General
-
Target
8ba0fe9b709ee1d025d3932ba550f86aa4a3110e1652690eaaebd1e8f98296aa
-
Size
124KB
-
MD5
839bb52b42b69703b6fb077997bd4588
-
SHA1
1018a7f33ae57fbfe6df8781a72c56a7c8281dec
-
SHA256
8ba0fe9b709ee1d025d3932ba550f86aa4a3110e1652690eaaebd1e8f98296aa
-
SHA512
fa513ef71bf5f5e97de4aaadcbf0de13237c8e8da51d5ec0bf8370d0e746d5d601eb009d19ce0bb44c7924b2433c1a5ee08996e8fa5ee716ec9de0a81fd7f237
-
SSDEEP
3072:nqJqa3GVSiV2M4+Et3rBQfpwTzZJJVmEcuYyH/6:+3tSfpKJJVDHy
Malware Config
Signatures
Files
-
8ba0fe9b709ee1d025d3932ba550f86aa4a3110e1652690eaaebd1e8f98296aa.exe windows x86
c0303f16cdfe231e368d5674eadd0fec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
SetLastError
FindResourceW
GetFileAttributesA
GetFileAttributesA
TlsGetValue
GetModuleHandleA
GetTickCount
RemoveDirectoryW
IsBadWritePtr
HeapFree
GetExitCodeThread
MapViewOfFile
GetLocaleInfoW
GetStringTypeA
IsValidCodePage
GetCurrentProcess
FindClose
LocalLock
CreateDirectoryW
GetDriveTypeW
user32
GetWindowTextW
LoadImageW
SetCursor
GetWindowLongW
DispatchMessageA
IsWindow
SetFocus
PostMessageW
IsDialogMessageA
LoadStringA
PeekMessageW
LoadCursorA
wsprintfW
msctf
TF_InitSystem
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE