Static task
static1
Behavioral task
behavioral1
Sample
08c776111f129762c8fdd80c0beadaadf6f6d0cc030b45a8fd978b77937fac7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08c776111f129762c8fdd80c0beadaadf6f6d0cc030b45a8fd978b77937fac7c.exe
Resource
win10v2004-20220812-en
General
-
Target
08c776111f129762c8fdd80c0beadaadf6f6d0cc030b45a8fd978b77937fac7c
-
Size
88KB
-
MD5
44b5be1a72c19f6325bde0de98959990
-
SHA1
9c42b4cf3c4392fdb51570a46603572763e60410
-
SHA256
08c776111f129762c8fdd80c0beadaadf6f6d0cc030b45a8fd978b77937fac7c
-
SHA512
d9d99c482e69f9e94162237e3e90bb55446311417edcea782d6db2b3b31fafaeec2815d7b280348a66d049aebf915660e1ac57345e690a3ae15836fac0f3fe7f
-
SSDEEP
1536:QmShiNaIxS8+3z3qEQ2MMdq5N3PfvI15/i54/5SPUeGs5YqD1sX5l4Usdl:QmRNaIxo3FRMMdq5BgLq59PUe95J1Y4H
Malware Config
Signatures
Files
-
08c776111f129762c8fdd80c0beadaadf6f6d0cc030b45a8fd978b77937fac7c.exe windows x64
a6160b82c25f469219cd5095f8daf741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
DeleteFileA
CreateEventA
SetEvent
WritePrivateProfileStringA
WriteFile
GetFullPathNameA
GetFileSize
GetPrivateProfileStringA
GetPrivateProfileIntA
MultiByteToWideChar
WideCharToMultiByte
MulDiv
lstrcpyA
lstrlenA
GetVersionExA
CreateFileA
CloseHandle
ReadFile
FlushFileBuffers
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
HeapSetInformation
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
gdi32
StartDocA
CreateDCA
EndPage
EndDoc
GetTextCharset
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetFontLanguageInfo
SetTextAlign
GetCharacterPlacementA
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
GetTextAlign
BeginPath
CreatePen
CreateSolidBrush
GetGlyphOutlineA
MoveToEx
EndPath
FlattenPath
PolyBezier
GetTextMetricsA
GetTextFaceA
GetStockObject
StretchDIBits
StartPage
ExtEscape
TextOutA
SetTextColor
SetBkMode
DeleteDC
DeleteObject
LineTo
GetPath
winspool.drv
DocumentPropertiesA
GetPrinterA
ClosePrinter
OpenPrinterA
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE