Static task
static1
Behavioral task
behavioral1
Sample
8fccdddcb7e0816876a681dff16116b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8fccdddcb7e0816876a681dff16116b2.exe
Resource
win10v2004-20220812-en
General
-
Target
8fccdddcb7e0816876a681dff16116b2
-
Size
32KB
-
MD5
8fccdddcb7e0816876a681dff16116b2
-
SHA1
dbfe8d34802a12b1ea38e8d330e3eb6e6d34733a
-
SHA256
18a88a0ba96124275964ed6f1576d0096dab7ff0134de108700df5b8d9d0a50f
-
SHA512
dcd3817df0e4d917e589b9d378c748c4d8608dede78f5a53fbe242356c1559b71a5386a557dcf900e4ea4aa9367d5873e24974ab4487064df850db2117bb282b
-
SSDEEP
768:F8WjSHSEMN7UGw+Y6qdLNCFbrrxrBfr7YezO:ymSyEuqLN8rBfoCO
Malware Config
Signatures
Files
-
8fccdddcb7e0816876a681dff16116b2.exe windows x86
d36aba0d7b4dab9087679ddad4e77b99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strlen
memcpy
strchr
strcpy
strcat
memcmp
_stricmp
sprintf
strcmp
strncmp
tolower
fabs
ceil
malloc
floor
free
fclose
strncpy
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
HeapFree
GetEnvironmentStrings
HeapAlloc
FreeEnvironmentStringsA
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
GetFileSize
ReadFile
FreeLibrary
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
Sleep
SetLastError
GetVersionExA
TlsAlloc
CreateDirectoryA
FindFirstFileA
FindClose
SetFileAttributesA
CopyFileA
FindNextFileA
GetLastError
HeapReAlloc
DeleteCriticalSection
user32
CharUpperA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
DestroyWindow
SendMessageA
CreateWindowExA
GetDC
GetWindowTextLengthA
GetWindowTextA
SetRect
DrawTextA
GetSystemMetrics
ReleaseDC
GetSysColor
GetSysColorBrush
CallWindowProcA
RemovePropA
SetWindowLongA
DefWindowProcA
SetPropA
GetParent
GetPropA
RedrawWindow
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
ShowWindow
CreateAcceleratorTableA
SetFocus
GetFocus
GetClientRect
FillRect
EnumChildWindows
PostMessageA
DefFrameProcA
GetWindowRect
GetActiveWindow
SetCursorPos
LoadImageA
SetCursor
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
SetCapture
GetCursorPos
ReleaseCapture
IsChild
GetClassNameA
RegisterWindowMessageA
DestroyIcon
gdi32
GetStockObject
SelectObject
SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
BitBlt
CreateBitmap
SetPixel
comctl32
InitCommonControlsEx
ole32
CoInitialize
RevokeDragDrop
winmm
timeBeginPeriod
shlwapi
PathMatchSpecA
Sections
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ