Static task
static1
Behavioral task
behavioral1
Sample
8db670f5868e8221f2e42a075053bbe7404c78b744b91ba6af28db9727b985cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8db670f5868e8221f2e42a075053bbe7404c78b744b91ba6af28db9727b985cf.exe
Resource
win10v2004-20220812-en
General
-
Target
8db670f5868e8221f2e42a075053bbe7404c78b744b91ba6af28db9727b985cf
-
Size
173KB
-
MD5
8cbed7ad8c26220f1dbfbdbaa87bb08c
-
SHA1
cb98f7c74a90964bca6705e9b6011a8eced7a7e2
-
SHA256
8db670f5868e8221f2e42a075053bbe7404c78b744b91ba6af28db9727b985cf
-
SHA512
be753eb2f102884f5028dbcd6dc53f0732f8ff9831cea730cbd8b783f55b8277092f3424a472885f3fca9740ba78ff4eb241f940dcb29257c99226bee5976eb3
-
SSDEEP
3072:znuyLZuo3xe1raOSC8HJLcswz1AZwhiVmTax63j5WThIWxQOR8e:znuyLco32r/BOJ0z1EoK4xWT5OOR
Malware Config
Signatures
Files
-
8db670f5868e8221f2e42a075053bbe7404c78b744b91ba6af28db9727b985cf.exe windows x86
38ca4b89e15d05e90c480f6739bfb894
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
GetAcceptLanguagesW
PathFindExtensionW
StrCmpIW
PathRemoveFileSpecW
PathIsRelativeW
PathCreateFromUrlW
UrlUnescapeW
PathAppendW
UrlCreateFromPathW
PathCombineW
rpcrt4
UuidCreate
kernel32
lstrlenA
FindAtomW
LocalFree
GetCurrentProcessId
HeapFree
ReleaseMutex
GetWindowsDirectoryA
HeapAlloc
ExpandEnvironmentStringsW
GetCurrentDirectoryW
FindNextFileW
GetModuleHandleA
lstrcmpiW
WritePrivateProfileStringW
GetModuleHandleW
EnumResourceLanguagesW
GetPrivateProfileIntW
LoadLibraryExA
GetSystemDirectoryW
FindClose
FindFirstFileW
FreeLibrary
GetConsoleCursorMode
LoadLibraryExW
GetSystemInfo
WaitForSingleObject
GetPrivateProfileStringW
GetProcessHeap
GetProcAddress
LoadLibraryW
CreateMutexW
CopyFileW
SetFileAttributesW
GetCurrentProcess
Sections
.text Size: 91KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ