Static task
static1
Behavioral task
behavioral1
Sample
d8c84e9dbdaad8d5d3355785e929639dc6c73006efb55818dbe1ce2317e6fd1d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d8c84e9dbdaad8d5d3355785e929639dc6c73006efb55818dbe1ce2317e6fd1d.exe
Resource
win10v2004-20220901-en
General
-
Target
d8c84e9dbdaad8d5d3355785e929639dc6c73006efb55818dbe1ce2317e6fd1d
-
Size
743KB
-
MD5
0c6b37aea42bf7a2a0869d35cb7f2400
-
SHA1
f6d1e57cd3aefef7bf2823ad081217e8f16db198
-
SHA256
d8c84e9dbdaad8d5d3355785e929639dc6c73006efb55818dbe1ce2317e6fd1d
-
SHA512
696481dfa4e0b44b84650e8095e9a56e326047c537294eaf2bee8176c16309415a9b8b27d744096139ce05e067090495db7ea5a6de664a475949528dc9b1a27d
-
SSDEEP
12288:HCMaZ3Y8XiQFtgBOZm3XuXNDOXKs2+Y9Jf9ywTmEVXCa6Jl6AzqNE+wNE:iM3IjFtgomH0kH2+Y9V0ObCa63VONE+w
Malware Config
Signatures
Files
-
d8c84e9dbdaad8d5d3355785e929639dc6c73006efb55818dbe1ce2317e6fd1d.exe windows x86
9bebb704e57035cb3de7e79b35570285
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetUserDefaultUILanguage
EnumDateFormatsA
VerifyVersionInfoW
EnumLanguageGroupLocalesW
GetProcessPriorityBoost
OpenWaitableTimerW
ReplaceFileA
PeekNamedPipe
GetSystemDefaultUILanguage
GetProcessVersion
GlobalAddAtomA
SetEnvironmentVariableW
_hwrite
EndUpdateResourceW
SetThreadPriority
GetProfileStringA
GetLocaleInfoW
SetEvent
SetFileAttributesW
GlobalFindAtomA
GetStringTypeW
GetModuleHandleA
lstrcmpiA
CreateTimerQueue
ExitProcess
GetCPInfo
GetPrivateProfileStringA
FindResourceExA
MultiByteToWideChar
SetErrorMode
CallNamedPipeA
GetWindowsDirectoryW
UnmapViewOfFile
GetPrivateProfileSectionNamesA
GetEnvironmentVariableA
GetCalendarInfoA
HeapAlloc
FreeEnvironmentStringsW
SetThreadPriorityBoost
ContinueDebugEvent
GetPriorityClass
OpenFile
InitAtomTable
lstrlenA
GetExitCodeThread
UpdateResourceA
user32
GetMessageExtraInfo
GetKeyNameTextA
LookupIconIdFromDirectoryEx
DrawTextW
SetWinEventHook
GetUserObjectSecurity
UnionRect
LoadKeyboardLayoutW
TranslateAcceleratorW
GetSysColorBrush
SendMessageTimeoutW
OpenWindowStationW
SwapMouseButton
CallMsgFilterA
OemToCharBuffA
DdeUnaccessData
CheckMenuRadioItem
GetClientRect
IsCharLowerA
EnumDesktopsW
GetMenuItemCount
SetUserObjectSecurity
ActivateKeyboardLayout
GetPriorityClipboardFormat
CopyAcceleratorTableW
DeleteMenu
InsertMenuW
CopyAcceleratorTableA
GetAltTabInfoW
CreateCursor
TileChildWindows
GetUserObjectInformationW
SendNotifyMessageW
DdeDisconnectList
RemoveMenu
DdeImpersonateClient
GetCaretBlinkTime
DdeInitializeA
SetMenuItemBitmaps
AppendMenuW
GetInputState
GetKeyboardType
TrackPopupMenu
GetShellWindow
GetWindowRgn
DdeQueryStringW
SetMenuItemInfoA
LockWindowUpdate
OpenInputDesktop
SetRect
DrawFocusRect
SetThreadDesktop
RegisterShellHookWindow
ShowCaret
GetDoubleClickTime
FindWindowExW
MapWindowPoints
GetWindowTextA
GetCursorInfo
GetWindowModuleFileNameA
ToAscii
DrawFrame
DrawTextExW
PostQuitMessage
MenuItemFromPoint
WINNLSEnableIME
GetWindowTextLengthA
shell32
SHFileOperationW
SHEmptyRecycleBinA
SHLoadInProc
SHExtractIconsW
SHGetSpecialFolderLocation
DragQueryFileA
SHGetPathFromIDListW
RealShellExecuteA
Sections
.text Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.arch Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ