Static task
static1
Behavioral task
behavioral1
Sample
8e3ca6c5d7d186908602d59e10862dc59d63a6921b963bb6c8c35de857e2cd82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e3ca6c5d7d186908602d59e10862dc59d63a6921b963bb6c8c35de857e2cd82.exe
Resource
win10v2004-20220812-en
General
-
Target
8e3ca6c5d7d186908602d59e10862dc59d63a6921b963bb6c8c35de857e2cd82
-
Size
800KB
-
MD5
0ef9981481f16e8c1663ee5dca6606e6
-
SHA1
b3aa859baa52f1fdd9254085dbda5b12e5521048
-
SHA256
8e3ca6c5d7d186908602d59e10862dc59d63a6921b963bb6c8c35de857e2cd82
-
SHA512
87fd4192f6f6c3d1fa82f136cb10385ff38d68a497b71a78ebe2e13c30794f8b2e2ad193fa17ec480492406d79a162c59e18709d66464ff52eb4f1a7a89f478f
-
SSDEEP
24576:HTMZ20ioQnf/mM71opSzOYXJ6MgYrxDf+:QZFMeM7qSzHXJF9r+
Malware Config
Signatures
Files
-
8e3ca6c5d7d186908602d59e10862dc59d63a6921b963bb6c8c35de857e2cd82.exe windows x86
0d544ac65e906f6f1bba375405e99653
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoW
SetFileTime
ReadFile
SetFileTime
lstrcpyA
GetExitCodeProcess
IsBadWritePtr
HeapSize
CreateEventA
GetModuleHandleA
LoadLibraryA
InterlockedExchange
LeaveCriticalSection
SetConsoleTitleA
SetFileTime
HeapCreate
CloseHandle
GetLastError
lstrcatA
GetStringTypeA
GetFileSize
mstscax
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
shell32
DuplicateIcon
ShellMessageBoxW
DragFinish
ExtractIconA
DragAcceptFiles
DllUnregisterServer
SHFree
SHGetSettings
StrChrA
ShellAboutA
SHGetMalloc
SHGetDiskFreeSpaceA
DragQueryFileA
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ