Static task
static1
Behavioral task
behavioral1
Sample
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe
Resource
win10v2004-20220812-en
General
-
Target
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b
-
Size
225KB
-
MD5
43c2cb824d039d2dd473f948c3155761
-
SHA1
d2a91c0b957260be9fe81412aed96fd95d616a25
-
SHA256
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b
-
SHA512
3ff7f1a4130336e6f90fd9427d776c5cafb7f98303bd7fb4e2e73257fe2343ad82a28564b7d51d894b020561c10adee09fbab20a4f3cc97117ff52c7fcfe1036
-
SSDEEP
3072:WPxfJGXnSmEisBooTVqIdfLAvNWUhwvTTIAHFHkyVE4ABvTuYGNLXlj7wPp0tid/:NzE3FTpdk98NVE4ABGJljcPOtoHh
Malware Config
Signatures
Files
-
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe windows x86
cae91a60412758b09f775c2cb6122f40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileA
GetCommandLineA
GetModuleHandleW
GetThreadLocale
VirtualAlloc
GetCurrentThread
GetProcAddress
GetStringTypeA
lstrlenA
GetCommandLineW
GetACP
GetVersion
GetOEMCP
GetCPInfo
ExitProcess
LoadLibraryExA
ExitThread
GetModuleHandleA
GetDiskFreeSpaceA
msvcrt
memcmp
wcsncmp
rand
shell32
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
DragQueryFileA
Shell_NotifyIconA
version
VerFindFileA
oleaut32
SysAllocStringLen
SafeArrayGetElement
gdi32
SetBkColor
RestoreDC
CopyEnhMetaFileA
CreatePalette
SetBkMode
SelectObject
GetClipBox
LineTo
CreateFontIndirectA
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ