Static task
static1
Behavioral task
behavioral1
Sample
8d4535833860b793777e64dd6d87f5fe81dac141506089e2c8280104cd0ca8ec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8d4535833860b793777e64dd6d87f5fe81dac141506089e2c8280104cd0ca8ec.exe
Resource
win10v2004-20220812-en
General
-
Target
8d4535833860b793777e64dd6d87f5fe81dac141506089e2c8280104cd0ca8ec
-
Size
109KB
-
MD5
704fc654edf811a11369e0cda2702a79
-
SHA1
d2207bcf66a640a15f9a1866930a4294549e5144
-
SHA256
8d4535833860b793777e64dd6d87f5fe81dac141506089e2c8280104cd0ca8ec
-
SHA512
3e4135f2dd8a20bd012e98b7cf0c0ea218e285d9a3f3d96614d5a702b42f6c006fca49c86224d68d98a5ef3fb22bea51c9e3e3ce8a80ad9c4065fb420bf9cb32
-
SSDEEP
1536:YZVAmXlOhuXahKD22yU6w+N73D6ScGBP4Xp8roeT9nqGNpt:Y82wuXIKKrw+N6ScGBP4X6T5nqypt
Malware Config
Signatures
Files
-
8d4535833860b793777e64dd6d87f5fe81dac141506089e2c8280104cd0ca8ec.exe windows x86
128bd9c2dffa45c8fe5e6de5c8de5165
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
HeapReAlloc
GetCurrentProcessId
Sleep
LoadLibraryW
IsBadReadPtr
GetProcessHeap
OutputDebugStringA
ExitProcess
GetProcAddress
GetLastError
GetModuleHandleW
GetEnvironmentStringsW
IsProcessorFeaturePresent
user32
GetActiveWindow
MessageBoxW
MessageBoxA
GetAltTabInfoA
oleaut32
GetActiveObject
GetAltMonthNames
winmm
timeGetDevCaps
timeBeginPeriod
timeGetTime
timeKillEvent
timeEndPeriod
timeGetSystemTime
timeSetEvent
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ