Static task
static1
Behavioral task
behavioral1
Sample
c8f2334942cc2d4d2a5fc19e04bb2428c010554896f6fee691ca002c3fccab45.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8f2334942cc2d4d2a5fc19e04bb2428c010554896f6fee691ca002c3fccab45.exe
Resource
win10-20220812-en
General
-
Target
c8f2334942cc2d4d2a5fc19e04bb2428c010554896f6fee691ca002c3fccab45
-
Size
2.9MB
-
MD5
a5f6fe293b8bf48e9dcdbcfb706e82ec
-
SHA1
fed1b5dc772776a7ce9c973783f8f28312ae4568
-
SHA256
c8f2334942cc2d4d2a5fc19e04bb2428c010554896f6fee691ca002c3fccab45
-
SHA512
a1bf36d02872193974ced1c0d46ac58eecade0ea9d4b4f8e75906f94f00b7f3060db113b018214c8f6282011acef8f954614712f700a62b2dd62b85ba9387ec0
-
SSDEEP
49152:vnTlyRcDAG06K7UgbTCsj8uKYRQQf73eSLiGfyJuvDgT4yr:7lWcDAP7LbhjrH+fuvD1yr
Malware Config
Signatures
Files
-
c8f2334942cc2d4d2a5fc19e04bb2428c010554896f6fee691ca002c3fccab45.exe windows x86
b128da42edc801068b5469911b24a324
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
HeapAlloc
InterlockedIncrement
HeapFree
CreateDirectoryW
SetEvent
GetModuleHandleW
GetProcessHeap
GlobalAlloc
GetSystemDirectoryW
WideCharToMultiByte
LoadLibraryW
Sleep
CreateFileW
GetPrivateProfileIntW
GetConsoleAliasesW
GetLastError
SetLastError
GetProcAddress
GetProcessHeaps
GetDefaultCommConfigW
LoadLibraryA
GlobalMemoryStatusEx
CreatePipe
lstrcatW
GetStringTypeW
GetConsoleTitleW
DeleteFileW
DeleteAtom
lstrcpyW
HeapSize
LCMapStringW
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers
IsProcessorFeaturePresent
SetThreadErrorMode
GetLocalTime
ExitProcess
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
HeapReAlloc
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
ReadFile
EncodePointer
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
WriteFile
GetModuleFileNameW
RtlUnwind
GetConsoleCP
GetConsoleMode
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
SetStdHandle
SetEndOfFile
user32
GetWindowRect
LoadCursorW
wsprintfW
GetDC
LoadIconW
GetDesktopWindow
GetSysColorBrush
RegisterClassW
SendMessageW
CountClipboardFormats
gdi32
CreateSolidBrush
SetGraphicsMode
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mimsps Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.juntrex Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bojitr Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.primero Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ