Static task
static1
Behavioral task
behavioral1
Sample
8e93f7a45356309be512177fbae76a2e9fb37d025fd24f47b611b7b05562e8d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e93f7a45356309be512177fbae76a2e9fb37d025fd24f47b611b7b05562e8d9.exe
Resource
win10v2004-20220812-en
General
-
Target
8e93f7a45356309be512177fbae76a2e9fb37d025fd24f47b611b7b05562e8d9
-
Size
188KB
-
MD5
10c9875b48816ad0f6251c60ac49ec61
-
SHA1
c8b95934a21684c00861eb59dbe25cb359df1be1
-
SHA256
8e93f7a45356309be512177fbae76a2e9fb37d025fd24f47b611b7b05562e8d9
-
SHA512
3325fe62808a31f3b964ca5f14ca18eea7e1ff5ed815e67c0b31b2481dc3dfb74534faec7fad9f70b8361f644a53b5fd9bbd5569e8dfdde90c0782970ef67344
-
SSDEEP
3072:CSdlWCyvHTbJ5MTY8b6JY+8q269LSAgVgQ+i6GWXOHhLy:CBfvHPfEY8b6JY+8qHLcVichy
Malware Config
Signatures
Files
-
8e93f7a45356309be512177fbae76a2e9fb37d025fd24f47b611b7b05562e8d9.exe windows x86
94e5dafbb3214df3cb8ca116fb609f65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFileTimeNow
shell32
ord196
kernel32
GetEnvironmentStringsW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetTickCount
FileTimeToSystemTime
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetSystemInfo
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
oleaut32
SysAllocString
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ