Static task
static1
Behavioral task
behavioral1
Sample
8ee223b431882b8c5c670e501744825add729532eb4196add4b8b209a640688e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ee223b431882b8c5c670e501744825add729532eb4196add4b8b209a640688e.exe
Resource
win10v2004-20220901-en
General
-
Target
8ee223b431882b8c5c670e501744825add729532eb4196add4b8b209a640688e
-
Size
32KB
-
MD5
0859661ac925779930919c50cf9ee191
-
SHA1
8ffaff1d80176545a465939b8d61424d9eec5aa4
-
SHA256
8ee223b431882b8c5c670e501744825add729532eb4196add4b8b209a640688e
-
SHA512
6d71f8fe69c3b6ad3285ebd979929829b042e6dd97a707ac0ebb73d731002ebf515583d82eb86c3319c5043b7a61562d16cac26fad07b66cb67e429571674c1c
-
SSDEEP
384:mj7nhLajeIGTTLS7c21VH06PqjQyWmlG8xrRikoWlVEdlpCf:mBLajTETLp2VU6P7sxNhmdlI
Malware Config
Signatures
Files
-
8ee223b431882b8c5c670e501744825add729532eb4196add4b8b209a640688e.exe windows x86
0cb0e323fac30348ce81bf1e066b3e90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
CreateMutexA
VirtualAlloc
GetLastError
LoadLibraryA
VirtualQuery
GetProcAddress
GetModuleHandleA
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
FreeLibrary
CloseHandle
GetVersionExA
GetCurrentThreadId
WaitForSingleObject
InitializeCriticalSection
InterlockedExchange
GetACP
GetCPInfo
GetCommandLineA
GetVersion
ExitProcess
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
SetStdHandle
SetFilePointer
HeapReAlloc
GetStringTypeW
user32
SetThreadDesktop
GetDC
ReleaseDC
CreateDesktopA
gdi32
CreateRoundRectRgn
BeginPath
PolyDraw
EndPath
DeleteObject
FlattenPath
shell32
ShellExecuteA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE