Static task
static1
Behavioral task
behavioral1
Sample
8bea94c9bd9a93e0edf79f1a7273000ac409f8b60ba4baa69dcc6b18ceb10790.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bea94c9bd9a93e0edf79f1a7273000ac409f8b60ba4baa69dcc6b18ceb10790.exe
Resource
win10v2004-20220812-en
General
-
Target
8bea94c9bd9a93e0edf79f1a7273000ac409f8b60ba4baa69dcc6b18ceb10790
-
Size
294KB
-
MD5
ba2d09f4b56c09f68416152ca02a0d95
-
SHA1
b304a2913d3bdbc119f14b7b9f3bc603d3ab3aa2
-
SHA256
8bea94c9bd9a93e0edf79f1a7273000ac409f8b60ba4baa69dcc6b18ceb10790
-
SHA512
959dc29480d5fd4d5c89e09d6f8f7f22931a80983cfa2e6345c17b92d8a8f40687430cfdbf3ece46c19c9d8eb069b2013919d4daedfb9097979702e42ba1bb40
-
SSDEEP
6144:wFBLHT/5oGFJl6FkNzxx97o6TcezG+BwLOULGQe73IV2:w/v/5oGrl6FGpo2huKB73+2
Malware Config
Signatures
Files
-
8bea94c9bd9a93e0edf79f1a7273000ac409f8b60ba4baa69dcc6b18ceb10790.exe windows x86
d21b34f002b38e96a76db976d718fdc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
VirtualFree
GetProcessHeap
GetModuleFileNameW
GetSystemDirectoryA
OpenMutexW
GetLastError
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetCurrentDirectoryA
OutputDebugStringA
GetSystemTime
HeapSize
SetEndOfFile
ReadFile
GetComputerNameW
GetCPInfo
lstrlenA
IsDebuggerPresent
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
CloseHandle
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CreateFileA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
user32
IsZoomed
GetForegroundWindow
GetProcessDefaultLayout
advapi32
RegOpenKeyExW
GetUserNameW
GetCurrentHwProfileW
Sections
.text Size: - Virtual size: 30.5MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ