Static task
static1
Behavioral task
behavioral1
Sample
8355f81cffb83ad861ec373b445c8e98dd52dba9f29fd61b3a5b1389c5366a48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8355f81cffb83ad861ec373b445c8e98dd52dba9f29fd61b3a5b1389c5366a48.exe
Resource
win10v2004-20221111-en
General
-
Target
8355f81cffb83ad861ec373b445c8e98dd52dba9f29fd61b3a5b1389c5366a48
-
Size
332KB
-
MD5
0884d2a8e2f554fb1ae41a77ae7c8eec
-
SHA1
067d06422e0f3f9b5319878f3ecdbf73e44e3c59
-
SHA256
8355f81cffb83ad861ec373b445c8e98dd52dba9f29fd61b3a5b1389c5366a48
-
SHA512
c7e566727480bb997034a3eacac08df80fb29b372b67e0c17b0b2354c0e0c4145a2156fb8bedee5ffac9efc4dc6a3d0c8972b1e3d14986457a8c256763815757
-
SSDEEP
6144:/0c5O0MTc9qSSyt/XrK9QDfr4zFLk7otOoPlK5tehOK0zERmX3U:sc5i49dSytreQzQFLkCOoPlwehUnX
Malware Config
Signatures
Files
-
8355f81cffb83ad861ec373b445c8e98dd52dba9f29fd61b3a5b1389c5366a48.exe windows x86
b9cf769d4ae2a9fabb2b7a2078ade260
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
CreateDirectoryA
GetProfileStringW
SetLastError
ExitProcess
ExpandEnvironmentStringsW
GetACP
HeapReAlloc
VirtualQuery
ReadConsoleOutputA
HeapAlloc
OpenMutexA
FreeEnvironmentStringsW
EnterCriticalSection
GlobalGetAtomNameW
GetFileAttributesW
IsDebuggerPresent
GetCurrentProcess
GetPrivateProfileSectionNamesW
GetCommandLineA
ResetEvent
GetConsoleCursorInfo
UnhandledExceptionFilter
FlushFileBuffers
GetPriorityClass
QueryPerformanceCounter
WaitForDebugEvent
SetConsoleCursorPosition
LCMapStringW
GetEnvironmentStringsW
GetThreadPriority
InterlockedExchange
LeaveCriticalSection
EnumSystemLocalesW
EnumResourceTypesW
OpenWaitableTimerA
GetCurrentThread
CompareStringW
CompareStringA
GetAtomNameW
GetModuleFileNameA
VirtualFree
GetCalendarInfoA
EnumSystemLocalesA
TerminateProcess
WideCharToMultiByte
HeapLock
ResumeThread
GlobalDeleteAtom
GetTimeZoneInformation
GetFullPathNameA
LockFileEx
GetFileType
ReadConsoleOutputAttribute
CreateEventW
lstrcpyA
LoadModule
GetProcAddress
GetCPInfo
GetTimeFormatA
GetSystemInfo
GetDiskFreeSpaceW
GetStringTypeA
Sleep
EnumDateFormatsW
ReadFile
GetStdHandle
GetSystemTime
InterlockedIncrement
LoadLibraryA
HeapFree
ConnectNamedPipe
GetVersion
EnumTimeFormatsW
DebugBreak
GetLocalTime
InterlockedDecrement
GetProcessAffinityMask
InitializeCriticalSection
FillConsoleOutputCharacterW
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
SetHandleCount
GetModuleHandleA
WriteProfileStringW
lstrcat
RtlUnwind
HeapDestroy
TlsFree
HeapCreate
CloseHandle
CreateMutexA
AllocConsole
TerminateThread
GetEnvironmentStrings
GetTickCount
CreateWaitableTimerA
SetFilePointer
GetStringTypeExA
GetCurrentThreadId
GetStringTypeW
UnmapViewOfFile
DeleteCriticalSection
GlobalAddAtomA
VirtualAlloc
WriteFile
IsBadWritePtr
CreateFileW
GetOEMCP
SetConsoleTitleW
SetCurrentDirectoryA
GetThreadLocale
GetLastError
SetStdHandle
FindFirstFileExW
MultiByteToWideChar
GetCurrentProcessId
SetConsoleActiveScreenBuffer
TlsAlloc
MoveFileExW
WriteConsoleInputW
CreateProcessW
LCMapStringA
DosDateTimeToFileTime
GetStartupInfoA
GetNamedPipeHandleStateA
SetEnvironmentVariableA
TlsGetValue
TlsSetValue
user32
DdeUninitialize
SetCaretBlinkTime
MonitorFromRect
IntersectRect
EndDialog
MapVirtualKeyW
ChangeDisplaySettingsExA
CreateDialogIndirectParamW
SetClassWord
GetWindowTextW
GetDialogBaseUnits
DestroyWindow
SetActiveWindow
GetAsyncKeyState
SendMessageW
DefWindowProcA
DrawAnimatedRects
GetMenuItemCount
SetClassLongA
RegisterClassA
CreateWindowExW
ReleaseCapture
LoadAcceleratorsW
SetPropA
ShowWindow
GetSysColor
NotifyWinEvent
CreateIconFromResource
MessageBoxA
SetCaretPos
RegisterClassExA
LoadBitmapW
PackDDElParam
shell32
SHEmptyRecycleBinA
comctl32
ImageList_Add
CreatePropertySheetPageA
ImageList_LoadImageW
CreateStatusWindowW
ImageList_Remove
ImageList_SetImageCount
InitCommonControlsEx
ImageList_Copy
ImageList_SetOverlayImage
advapi32
AbortSystemShutdownA
StartServiceW
InitializeSecurityDescriptor
RegEnumKeyA
RegRestoreKeyA
CryptDuplicateKey
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ