Static task
static1
Behavioral task
behavioral1
Sample
8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe
Resource
win10v2004-20221111-en
General
-
Target
8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c
-
Size
199KB
-
MD5
212ef99d4f7728c29d2676ad566fccd8
-
SHA1
1aaaa2122e9817fd7972ab797fc2f6e10b7e1cd9
-
SHA256
8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c
-
SHA512
f6689ecb7c76f3ee519f4bcba90949f31706e1fa76636b83ca1e51c5bd9d0b218ed125b39714563c5adc7690e1008bba0fa2ca968c2725d8cc1508dc874d456f
-
SSDEEP
3072:YhxrZE7GjmNMOAw9iBEYX8eeGIQauOUsMXMkuzUh7IkBeXHea8U8ajt:Yhxl+ESMHjKkeTvUsMD4NkAXHaiR
Malware Config
Signatures
Files
-
8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe windows x86
1d17c2d354341bbe31816ef744bb49d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetDesktopWindow
GetSystemMetrics
GetDC
kernel32
lstrcmpA
lstrcmpiA
GetModuleHandleW
GetCurrentThread
DeleteFileA
Sleep
GetWindowsDirectoryA
RemoveDirectoryA
GetThreadLocale
QueryPerformanceCounter
lstrlenA
GetDriveTypeA
GetCommandLineW
GetProcessHeap
GetLastError
GlobalFindAtomA
GetModuleHandleA
DeleteFileW
GetCurrentProcess
GlobalFindAtomW
GetOEMCP
GetTickCount
lstrcmpiW
GetVersion
GetUserDefaultLangID
LoadLibraryW
GetConsoleOutputCP
GetStartupInfoA
GetACP
GetCurrentProcessId
lstrlenW
GetCurrentThreadId
CopyFileA
SetCurrentDirectoryA
MulDiv
IsDebuggerPresent
SetLastError
GetCommandLineA
VirtualAlloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ