Static task
static1
Behavioral task
behavioral1
Sample
8cd8efad8c6d62328a95a2be9b7bf3977ffcc066dc8f82010bdd56a6d0d6d11f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8cd8efad8c6d62328a95a2be9b7bf3977ffcc066dc8f82010bdd56a6d0d6d11f.exe
Resource
win10v2004-20221111-en
General
-
Target
8cd8efad8c6d62328a95a2be9b7bf3977ffcc066dc8f82010bdd56a6d0d6d11f
-
Size
376KB
-
MD5
4165eb68c959487dad6ef02646aa29c3
-
SHA1
fb3afa14170009086adb3a8e48ccdc189908a324
-
SHA256
8cd8efad8c6d62328a95a2be9b7bf3977ffcc066dc8f82010bdd56a6d0d6d11f
-
SHA512
24942d6a4011bbea790872e56912b1855cc9e29c03bbb706ebc4c78a46d4a9bb4fa09f57683f347a273ca4e79e69b4f6c804904f4ed93fc564a860db2b07e339
-
SSDEEP
6144:qDf6Ygsvu1uyGSQlollY8DKc/qSUhosrLEV/V6r5:Mf6BsvmuzZGTDK2qS/yd
Malware Config
Signatures
Files
-
8cd8efad8c6d62328a95a2be9b7bf3977ffcc066dc8f82010bdd56a6d0d6d11f.exe windows x86
a8af0ff9e88c5836cdd98b5ce699e390
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LCMapStringW
WideCharToMultiByte
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetConsoleCP
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
Sleep
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
GetConsoleMode
LoadLibraryW
GetStringTypeW
HeapReAlloc
FlushFileBuffers
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
IsProcessorFeaturePresent
CloseHandle
lstrcpyA
GetCurrentDirectoryA
GetPrivateProfileSectionA
LoadLibraryA
GetLocalTime
GetPrivateProfileStringA
GetLastError
MultiByteToWideChar
MulDiv
GetCurrentThreadId
HeapCreate
GetCommandLineA
HeapAlloc
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
GetStartupInfoW
HeapSetInformation
LeaveCriticalSection
EnterCriticalSection
HeapFree
FreeLibrary
GetOEMCP
CreateFileW
user32
LoadCursorA
FindWindowA
GetKeyboardLayoutList
CharToOemA
RegisterClassA
MoveWindow
GetDlgItemTextA
UpdateWindow
LoadImageA
ReleaseCapture
AdjustWindowRectEx
DispatchMessageA
DialogBoxParamA
SetDlgItemTextA
CallWindowProcA
GetDialogBaseUnits
EndPaint
DestroyWindow
GetMessageA
GetWindowRect
RegisterClassExA
MonitorFromPoint
PostQuitMessage
GetWindowDC
IsIconic
FillRect
GetKeyState
SetForegroundWindow
GetParent
IsWindowEnabled
GetClientRect
SetFocus
SendMessageA
BeginPaint
GetMonitorInfoA
GetDC
TranslateMessage
GetMenu
TrackPopupMenuEx
MapVirtualKeyA
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
CreateWindowExA
ReleaseDC
GetDlgItem
DefWindowProcA
GetCursorPos
ShowWindow
CreatePopupMenu
EnumDesktopsA
gdi32
BitBlt
GetGlyphOutlineA
LineTo
SetTextColor
GetOutlineTextMetricsA
DeleteDC
GetDeviceCaps
CreateFontIndirectA
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
CreateBrushIndirect
Ellipse
SetPolyFillMode
SetStretchBltMode
CreatePen
GetTextMetricsA
GetFontData
GetObjectA
GetStockObject
CreateSolidBrush
TextOutA
MoveToEx
comdlg32
ChooseFontA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ole32
PropVariantCopy
StgCreatePropSetStg
PropVariantClear
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
OleLoadPicture
ws2_32
inet_addr
netapi32
NetApiBufferFree
NetUserEnum
winmm
mciSendCommandA
gdiplus
GdipFree
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipAlloc
authz
AuthzInitializeResourceManager
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 198KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ