Static task
static1
Behavioral task
behavioral1
Sample
8dafa609a6c4c1a3844dc768b42e1d002693ccb4ce9868fad3d27f112c132ac5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8dafa609a6c4c1a3844dc768b42e1d002693ccb4ce9868fad3d27f112c132ac5.exe
Resource
win10v2004-20220901-en
General
-
Target
8dafa609a6c4c1a3844dc768b42e1d002693ccb4ce9868fad3d27f112c132ac5
-
Size
800KB
-
MD5
21ebca304f7aab3f4d1d0fdce0edc436
-
SHA1
3f5e86ba5dfe57c33213f052ec42c082c4e34dfe
-
SHA256
8dafa609a6c4c1a3844dc768b42e1d002693ccb4ce9868fad3d27f112c132ac5
-
SHA512
aaead5cfe832ffe4379574961bf25699d6aa79681f14e3129eacfe75d72ff9a45e09c30745ea825713b39538988bfb73519ef987ffad6e6a790a5f2f6ed980f8
-
SSDEEP
24576:GOPbt/T7Wv+LuE00e/9ZhmgJLFjPTEkRm4Am+W:BPbt/PWv+Cz0e/Yg3jLEkRmHm+
Malware Config
Signatures
Files
-
8dafa609a6c4c1a3844dc768b42e1d002693ccb4ce9868fad3d27f112c132ac5.exe windows x86
f6a990d7366f6d8d93d82ba63871708d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
IsBadWritePtr
GetExitCodeThread
HeapSize
GetTickCount
GetFileAttributesA
VirtualProtect
GetFileAttributesA
TlsGetValue
RemoveDirectoryA
FindResourceA
GetModuleHandleA
GetLocaleInfoA
FindClose
IsValidCodePage
SetLastError
MapViewOfFile
GetDriveTypeW
CreateDirectoryA
GetStringTypeA
LocalLock
user32
DispatchMessageA
PeekMessageW
PostMessageW
GetCapture
LoadImageW
GetWindowLongW
SetCursor
LoadCursorA
IsDialogMessageA
SetFocus
wsprintfW
GetWindowTextW
IsWindow
msaatext
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE