Static task
static1
Behavioral task
behavioral1
Sample
8492eff6d25b1367ce8f7a34324f566448ee6720af23d93621f6997a2c885ef8.exe
Resource
win7-20221111-en
General
-
Target
8492eff6d25b1367ce8f7a34324f566448ee6720af23d93621f6997a2c885ef8
-
Size
95KB
-
MD5
529cc2617fe439aec89216a651a951e0
-
SHA1
2f11222da10214d72859bc8f72108a900e807d24
-
SHA256
8492eff6d25b1367ce8f7a34324f566448ee6720af23d93621f6997a2c885ef8
-
SHA512
3fdc4f63e15dfbd718edb0820fe5cc4241a1ac327790e198732076d857bb46ed88f50a76c5f17783aafe043091930c06595b7789229ee00c86091496ab0717ab
-
SSDEEP
1536:wi/oWNYnDa+Q3qXbV5NZEC2lRKnV2QKC2Ey6ncZZHmOW8pn6U:XoPnDZbR50UV0Czy62hmOVZ6U
Malware Config
Signatures
Files
-
8492eff6d25b1367ce8f7a34324f566448ee6720af23d93621f6997a2c885ef8.exe windows x86
93472c5f8a7e8ace3ec6b37e6fdb51ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
GetFileAttributesW
GetProcAddress
GetVersionExW
GetCurrentProcess
LoadLibraryExW
LocalFree
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
shell32
CommandLineToArgvW
ShellExecuteExW
shlwapi
PathRemoveFileSpecW
StrCatBuffW
StrCmpIW
StrCpyW
StrCatW
StrCmpNW
PathFileExistsW
msvcr80
wcsrchr
wcscpy_s
wcsstr
memset
_amsg_exit
__wgetmainargs
_cexit
_exit
wcscat_s
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
wcslen
_XcptFilter
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE