Static task
static1
Behavioral task
behavioral1
Sample
8a116fd15a6e4e111838ba26e053b750827a978384466a88cd7f90b49dc70581.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8a116fd15a6e4e111838ba26e053b750827a978384466a88cd7f90b49dc70581.exe
Resource
win10v2004-20220901-en
General
-
Target
8a116fd15a6e4e111838ba26e053b750827a978384466a88cd7f90b49dc70581
-
Size
564KB
-
MD5
8fc0ff7f3e976248df137129002b9cc2
-
SHA1
e0e303f08cc0bd82f9090039d55567181064bb13
-
SHA256
8a116fd15a6e4e111838ba26e053b750827a978384466a88cd7f90b49dc70581
-
SHA512
55bafd18b37f036508f5580f35def0d4c29f593850dcdb96610c19d88349ef9c55d79a0253ec6795d5661c2d415d49bb04d619bfe9204bf0f79a92a944d5b08d
-
SSDEEP
12288:2gZu7g/CXbuN0DPVFTIsU365uQSkRejnDsDL8TRxQ:291XaN07b1wQtejnIf8c
Malware Config
Signatures
Files
-
8a116fd15a6e4e111838ba26e053b750827a978384466a88cd7f90b49dc70581.exe windows x86
eb7ae89ff3c3d35bbe595735dc39e5ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA
user32
CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA
advapi32
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegEnumValueA
RegCreateKeyA
Sections
.text Size: 512KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ