Static task
static1
Behavioral task
behavioral1
Sample
8b262c8a24b94a50745b875ba88c50c5dfc4fc4edb963e2dd2445dc7f7fe760e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8b262c8a24b94a50745b875ba88c50c5dfc4fc4edb963e2dd2445dc7f7fe760e.exe
Resource
win10v2004-20220901-en
General
-
Target
8b262c8a24b94a50745b875ba88c50c5dfc4fc4edb963e2dd2445dc7f7fe760e
-
Size
220KB
-
MD5
009cd378cc0afa7d085dd31253301c3d
-
SHA1
87e863aac5a29c7e25a5252f5dedf8dc7ae46f88
-
SHA256
8b262c8a24b94a50745b875ba88c50c5dfc4fc4edb963e2dd2445dc7f7fe760e
-
SHA512
9542619ce4045401b2d1b3ca2a5c1ee377f8611c1486c8f3d5a994a9335915e9d63ec393a8fe39fb5c3bb91269dd22acccbd68a40e41d00b31cd8b22ab33a800
-
SSDEEP
6144:w4UfCzgfexwXIN2zGCcc3ks0dd2XOQdX:w6zgfexwXK2qCfv0dIeQd
Malware Config
Signatures
Files
-
8b262c8a24b94a50745b875ba88c50c5dfc4fc4edb963e2dd2445dc7f7fe760e.exe windows x86
6cc100007867d383b04396ef4ac0badf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
CreateMutexA
Sleep
GetModuleFileNameA
GetLastError
CreateEventA
CloseHandle
WaitForSingleObject
DeleteFileA
SetEvent
ResumeThread
CreateThread
TlsSetValue
ExitThread
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
ReadFile
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
advapi32
RegCloseKey
StartServiceCtrlDispatcherA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ