Static task
static1
Behavioral task
behavioral1
Sample
8d71ab765fdf187446aedc65f6a4dc7c579d28d33a02c8f6b3acffc627dd794f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8d71ab765fdf187446aedc65f6a4dc7c579d28d33a02c8f6b3acffc627dd794f.exe
Resource
win10v2004-20221111-en
General
-
Target
8d71ab765fdf187446aedc65f6a4dc7c579d28d33a02c8f6b3acffc627dd794f
-
Size
25KB
-
MD5
89d2df8ec6758be24d8f4dfad9f04af1
-
SHA1
0f48e6fd47d1781eb06f9811c8cd97ee49a638be
-
SHA256
8d71ab765fdf187446aedc65f6a4dc7c579d28d33a02c8f6b3acffc627dd794f
-
SHA512
ff0184c0bb7b4560d18c4ecd59d84b1be5b80b5de4c29b8616e8838072fccb562342032a97feb97ff659965192844147e037cac07e3dcaba6471cad52880488f
-
SSDEEP
384:TQagXZPRlOjTh4wdTDRnWAiBUiQSZmG4ge9OslgOSLJlg23f4I7I8XAw:TCwdTDRnnFiQSZigeMs+O+Jlg2QxuAw
Malware Config
Signatures
Files
-
8d71ab765fdf187446aedc65f6a4dc7c579d28d33a02c8f6b3acffc627dd794f.exe windows x86
56f68fe89a094c6d3798a2d6d0e2ccd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileW
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineW
GetComputerNameW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetModuleHandleA
GetModuleHandleW
GetStdHandle
GetSystemTimeAsFileTime
GetVersionExA
GetVolumeInformationW
GlobalMemoryStatus
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
QueryDosDeviceW
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenW
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
MessageBoxW
PostQuitMessage
RegisterClassA
TranslateMessage
wsprintfW
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 229B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ