Static task
static1
Behavioral task
behavioral1
Sample
8f5c2ba4dccbfd4d9239ca7c5364f09966861611e9381b563302dac345fa0d99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f5c2ba4dccbfd4d9239ca7c5364f09966861611e9381b563302dac345fa0d99.exe
Resource
win10v2004-20221111-en
General
-
Target
8f5c2ba4dccbfd4d9239ca7c5364f09966861611e9381b563302dac345fa0d99
-
Size
502KB
-
MD5
fd1e658bc1223c8df5b88cc2442bd9be
-
SHA1
aa6a46a4e30bef48d751bb6b3b02678b6b0a6043
-
SHA256
8f5c2ba4dccbfd4d9239ca7c5364f09966861611e9381b563302dac345fa0d99
-
SHA512
9f80818959bf55305b57e66537f6075f80374c0884d7c241d82a150593c040da8c66cb6e8e84ae59d3962fcf928b1553b6fddf4512335c3bc716785a315fcb77
-
SSDEEP
6144:6ina+3WRv778L6ATe84es1Aitg6c3tULvkLxO2XnvUx7HGgAE/HYFnJHGqzTat:Vami72V68dsttywv6xZsnHYnJHPTa
Malware Config
Signatures
Files
-
8f5c2ba4dccbfd4d9239ca7c5364f09966861611e9381b563302dac345fa0d99.exe windows x86
0af0224bbb9c934bf299435c3a4c657f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CloseMetaFile
GetLayout
CreateSolidBrush
PlayEnhMetaFile
SelectObject
BeginPath
PatBlt
CreateScalableFontResourceW
GetEnhMetaFileDescriptionA
GetDIBColorTable
FixBrushOrgEx
ModifyWorldTransform
comctl32
InitCommonControlsEx
advapi32
CryptEnumProviderTypesA
CryptSignHashW
LookupPrivilegeValueA
CryptGetKeyParam
CryptReleaseContext
RegConnectRegistryA
RegFlushKey
LookupAccountNameA
CryptDuplicateKey
RegQueryValueA
CryptEnumProvidersA
RegCreateKeyExA
RegQueryMultipleValuesA
CryptSetHashParam
CryptSetProviderExW
AbortSystemShutdownW
RevertToSelf
RegEnumKeyA
wininet
CreateUrlCacheContainerA
InternetSetFilePointer
FindFirstUrlCacheEntryW
GopherGetAttributeA
user32
RegisterClassExA
SetCaretBlinkTime
DrawIconEx
PtInRect
DdeAccessData
SetScrollRange
GetSystemMetrics
RegisterClassA
CreateDialogParamA
SystemParametersInfoA
ShowOwnedPopups
DefMDIChildProcA
GetUserObjectSecurity
SetMenuDefaultItem
DrawMenuBar
kernel32
SetStdHandle
WriteConsoleA
GetLocaleInfoA
TlsSetValue
SetConsoleCtrlHandler
GlobalFix
GetTimeFormatA
RtlUnwind
lstrcmpi
GetACP
GetConsoleMode
GetCurrentProcess
GetLastError
LoadLibraryA
IsDebuggerPresent
GetEnvironmentStrings
MultiByteToWideChar
GetOEMCP
GetProcAddress
FreeEnvironmentStringsW
HeapDestroy
CloseHandle
OpenMutexA
EnterCriticalSection
HeapSize
GetCurrentThreadId
GetCurrentProcessId
WriteFile
ExitProcess
GetPrivateProfileSectionNamesA
VirtualAlloc
LeaveCriticalSection
QueryPerformanceCounter
WriteConsoleW
GetCurrentThread
VirtualFree
SetEnvironmentVariableA
InterlockedIncrement
CreateEventA
GetCommandLineA
GetFileType
GetEnvironmentStringsW
GetLocaleInfoW
CreateFileA
GetProcessHeap
HeapFree
LCMapStringA
TerminateProcess
GetUserDefaultLCID
WideCharToMultiByte
HeapAlloc
GetTickCount
TlsGetValue
SetFilePointer
GetModuleHandleA
UnhandledExceptionFilter
InterlockedDecrement
VirtualQuery
CompareStringA
CreateMutexA
GetStringTypeW
CommConfigDialogA
FlushFileBuffers
ReadFile
HeapCreate
GetVersionExA
FreeLibrary
GetStartupInfoA
SetLastError
FreeEnvironmentStringsA
GetConsoleCP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetConsoleOutputCP
LCMapStringW
GetDateFormatA
GetTimeZoneInformation
Sleep
IsValidCodePage
HeapReAlloc
IsValidLocale
LocalLock
SetUnhandledExceptionFilter
GetStringTypeA
GetStdHandle
GetCPInfo
TlsAlloc
CompareStringW
GetSystemTimeAsFileTime
SetHandleCount
CreateDirectoryA
EnumSystemLocalesA
WritePrivateProfileStringA
TlsFree
Sections
.text Size: 330KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ