Static task
static1
Behavioral task
behavioral1
Sample
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe
Resource
win10v2004-20221111-en
General
-
Target
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d
-
Size
255KB
-
MD5
ffbd0491acd18bbe2b319684f054d49a
-
SHA1
0d1572458d14a2138231435d310a1bc105badd91
-
SHA256
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d
-
SHA512
23b2f1582ce6f55712047e0d5f37f1bfea105cf4eba7a4e2e575b87e2c29ec06f99afa10dba06f24b1a5c99b8bd7b778c08e537ff70be15d36be358354f6eadf
-
SSDEEP
6144:6cAiBQCjZ/CBdTvLoVSgD9VZ5DtMBfyJy9im0rwl5s5hW6A:bj/ytMVRDTb2py8g7CH
Malware Config
Signatures
Files
-
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe windows x86
d26d1b67b62d0b097e32d89bd0edc72f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoW
SheChangeDirA
kernel32
GetStdHandle
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
TlsFree
OpenFileMappingW
CompareStringW
GetSystemTime
FlushFileBuffers
CreateMutexA
DeleteCriticalSection
SetLastError
GetFileAttributesExW
HeapReAlloc
GetTickCount
GetCPInfo
ReadFileEx
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetCurrentThreadId
FindFirstFileExA
GetCalendarInfoW
CreateToolhelp32Snapshot
TlsAlloc
FreeEnvironmentStringsA
SetHandleCount
HeapFree
GetNamedPipeHandleStateW
GetModuleFileNameW
CloseHandle
DeleteAtom
GetCurrentThread
ReadConsoleOutputA
InitializeCriticalSection
SetLocalTime
GetStartupInfoW
GetSystemTimeAsFileTime
lstrcatA
HeapDestroy
SetStdHandle
SetEnvironmentVariableA
VirtualAlloc
TerminateProcess
FillConsoleOutputCharacterW
GetVersion
WriteFile
LeaveCriticalSection
GetProcessAffinityMask
UnhandledExceptionFilter
EnterCriticalSection
ReleaseSemaphore
InterlockedIncrement
EnumCalendarInfoA
FreeEnvironmentStringsW
LoadLibraryA
GetLocalTime
InterlockedExchange
GetCommandLineW
GetEnvironmentStrings
CompareStringA
VirtualFree
QueryPerformanceCounter
InterlockedDecrement
GetCommandLineA
GetCurrentProcess
SetFilePointer
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetCurrentProcessId
GetStringTypeW
DosDateTimeToFileTime
VirtualQuery
ExitProcess
LCMapStringW
TlsSetValue
IsBadWritePtr
ReadFile
LCMapStringA
GetTimeZoneInformation
TlsGetValue
GetFileType
HeapCreate
GetLastError
GetProcAddress
HeapAlloc
MapViewOfFile
SetCurrentDirectoryA
OpenMutexA
comctl32
CreateToolbarEx
DrawStatusTextW
ImageList_SetDragCursorImage
CreatePropertySheetPageA
ImageList_SetFilter
ImageList_DragLeave
ImageList_SetFlags
ImageList_Duplicate
ImageList_DrawEx
ImageList_Write
ImageList_SetBkColor
ImageList_Add
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_BeginDrag
ImageList_Destroy
ImageList_Read
ImageList_Remove
wininet
InternetCrackUrlA
GetUrlCacheGroupAttributeW
FtpSetCurrentDirectoryA
InternetGetConnectedStateEx
SetUrlCacheConfigInfoW
InternetGetCookieA
InternetTimeToSystemTimeA
InternetSetDialStateW
FindNextUrlCacheEntryExW
user32
ReplyMessage
VkKeyScanW
CharLowerBuffW
OpenIcon
LoadImageA
MessageBoxW
CreateWindowExW
CreateWindowStationA
RegisterClassExA
GetKeyboardLayoutNameW
EnumPropsA
GetCursor
GetThreadDesktop
RegisterClassA
ShowWindow
ModifyMenuW
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ