Static task
static1
Behavioral task
behavioral1
Sample
8bbd9781294b10bbff0a443ce9d2b0aa7021c1b9be77b585aeda0f66be6415e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bbd9781294b10bbff0a443ce9d2b0aa7021c1b9be77b585aeda0f66be6415e8.exe
Resource
win10v2004-20220812-en
General
-
Target
8bbd9781294b10bbff0a443ce9d2b0aa7021c1b9be77b585aeda0f66be6415e8
-
Size
662KB
-
MD5
9648202144d6271ad1d4c56964e6d225
-
SHA1
0e44bdc764687e8e7c3b647eac6f6b6f626d2d5e
-
SHA256
8bbd9781294b10bbff0a443ce9d2b0aa7021c1b9be77b585aeda0f66be6415e8
-
SHA512
dafdbb8119864a0ce38cb66a2b98f73db79c79e9ef457c21a29cc30ee9538e1f28b3f4d418407ed1b127964cbafd00958d06f321c34cb15a7d9dfe018c2c9ea6
-
SSDEEP
12288:o5Yypggo9JT1wX3rSXe9XaO5pLscyY+PytEfD63NcyiSWAvWthBfDoy+/b9b8CR5:oyyagoXTGewHb3yYTEba4TffW9b8CsRs
Malware Config
Signatures
Files
-
8bbd9781294b10bbff0a443ce9d2b0aa7021c1b9be77b585aeda0f66be6415e8.exe windows x86
23b7c10cee4b01c9210c5ffa477f431a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetTickCount
GetCommandLineA
GetLastError
GetCurrentProcessId
GetVersion
GetModuleHandleA
GetCurrentThread
ExitProcess
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WideCharToMultiByte
GetModuleHandleW
GetACP
FindNextFileW
SetFilePointer
TlsFree
MapViewOfFile
HeapSize
GetCurrentDirectoryA
LockResource
lstrlenW
VirtualQuery
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
GlobalFree
GetSystemInfo
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CompareStringA
FindFirstFileA
GetProcessHeap
GetProcAddress
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
VirtualProtect
QueryPerformanceCounter
SetEvent
LoadLibraryW
EnterCriticalSection
HeapFree
CloseHandle
SetEndOfFile
GlobalAlloc
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
GetModuleFileNameA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
OutputDebugStringA
InterlockedDecrement
FindClose
LoadResource
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
HeapDestroy
WaitForSingleObject
ReleaseMutex
GetConsoleOutputCP
user32
SendMessageA
IsWindowVisible
SetForegroundWindow
TrackPopupMenu
LoadCursorA
GetDlgItem
FillRect
GetWindowLongA
ShowWindow
DispatchMessageA
PostQuitMessage
Sections
.text Size: 627KB - Virtual size: 949KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ