Static task
static1
Behavioral task
behavioral1
Sample
8fe6363a68074a642639a63e58b2349abf2cd80ae730049dfb5b9ea67b440fc5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8fe6363a68074a642639a63e58b2349abf2cd80ae730049dfb5b9ea67b440fc5.exe
Resource
win10v2004-20220812-en
General
-
Target
8fe6363a68074a642639a63e58b2349abf2cd80ae730049dfb5b9ea67b440fc5
-
Size
328KB
-
MD5
91232b68a0cfcad206018cdff69d4ea0
-
SHA1
346fe6233c4114b558c03ace5d21ff564fa4de7c
-
SHA256
8fe6363a68074a642639a63e58b2349abf2cd80ae730049dfb5b9ea67b440fc5
-
SHA512
1c1659c4bb9b433df52889e309c4ebf97f049e8a12a9c3a59d8f551d9ecd3b24cbabe221d7b5f5ecf943d385677bf4ff843a730a9e737577db8842d9cf0b5ec7
-
SSDEEP
6144:xKVDr/70/cETfDHBwsIQq9pUmIWSDvg27UKPdzo0naGj:MDrA/97BwsIQq9pUmIlg27UK1PaGj
Malware Config
Signatures
Files
-
8fe6363a68074a642639a63e58b2349abf2cd80ae730049dfb5b9ea67b440fc5.exe windows x86
d376bb31b903c406ce063fee32c5423e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
GetModuleFileNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
GetLastError
LCMapStringW
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CloseHandle
SetFilePointer
ReadFile
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetModuleFileNameA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
DebugBreak
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
CreateFileA
SetStdHandle
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoW
SetEndOfFile
Sections
.text Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ