Static task
static1
Behavioral task
behavioral1
Sample
8bb621300a14cc06b25d9d9fe67de60e48c6cd405365378113094c558f1b9288.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bb621300a14cc06b25d9d9fe67de60e48c6cd405365378113094c558f1b9288.exe
Resource
win10v2004-20220812-en
General
-
Target
8bb621300a14cc06b25d9d9fe67de60e48c6cd405365378113094c558f1b9288
-
Size
128KB
-
MD5
1e555b4ab7ed94432f0bb3f20212c1e0
-
SHA1
cf546fbd3a530d0ce148d36fca947b1af889bbf9
-
SHA256
8bb621300a14cc06b25d9d9fe67de60e48c6cd405365378113094c558f1b9288
-
SHA512
6a1e9848bfaf8a17b8a33dac3330995d1153ff3c7412c3bc9bc8fa71a891a78486a9eee4c0f3989e004abaf3f9cc8950c64d11b067ab86807aa70e4732756ddf
-
SSDEEP
3072:uscCgrWuh4nXBzdEZU4jdYNX9ciIFyZ0UNjvlKBlSPBUz9Z:M7MBzoHwOiUONN4
Malware Config
Signatures
Files
-
8bb621300a14cc06b25d9d9fe67de60e48c6cd405365378113094c558f1b9288.exe windows x86
8e17cae4c11e5ab9c6a2a99139799b74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidCodePage
CreateDirectoryW
IsBadWritePtr
GetLocaleInfoW
GetTickCount
FindResourceW
GetFileAttributesA
GetCurrentProcess
MapViewOfFile
FindClose
GetModuleHandleA
RemoveDirectoryW
TlsGetValue
HeapFree
SetLastError
GetFileAttributesA
VirtualProtect
GetExitCodeThread
GetDriveTypeW
LocalLock
GetStringTypeA
user32
IsDialogMessageA
PostMessageW
LoadImageW
SetCursor
GetWindowLongW
LoadCursorA
GetWindowTextW
SetFocus
wsprintfW
IsWindow
LoadStringA
DispatchMessageA
PeekMessageW
msctf
DllUnregisterServer
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE