Static task
static1
Behavioral task
behavioral1
Sample
8fd8c79320ae418731a65250695a608b226b96d8f189edaf531d964f35eb7e8c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8fd8c79320ae418731a65250695a608b226b96d8f189edaf531d964f35eb7e8c.exe
Resource
win10v2004-20220812-en
General
-
Target
8fd8c79320ae418731a65250695a608b226b96d8f189edaf531d964f35eb7e8c
-
Size
154KB
-
MD5
8264d32ec00b4a1dd9fe8d1ab7712013
-
SHA1
1531ff792005618c44eaabc5798d38e9d9ae60ba
-
SHA256
8fd8c79320ae418731a65250695a608b226b96d8f189edaf531d964f35eb7e8c
-
SHA512
53a5f5d1a75db6611fa9c29f7d2a69c4bfd3813c35caf5ecc198f9a372c101147e3337f361a323b6af1dfa33468f8236f740db63e2f867e74583b5e089b91fe5
-
SSDEEP
3072:G44/zyeUy5X/+ffdnY4ltsw1zi/Byz/tsmggUIft0mN:G447vUy5P+3dnnDzVsmggUIff
Malware Config
Signatures
Files
-
8fd8c79320ae418731a65250695a608b226b96d8f189edaf531d964f35eb7e8c.exe windows x86
5c59d34655ed7d7bae30a42fa7789407
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
GetLastError
FindNextFileA
FindClose
FindFirstFileA
GetSystemTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
ExitProcess
SetFilePointer
InitializeCriticalSection
DeleteCriticalSection
FatalAppExitA
Sleep
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
FlushFileBuffers
ReadFile
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
CreateFileA
GetACP
GetOEMCP
SetEndOfFile
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.srdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE