Static task
static1
Behavioral task
behavioral1
Sample
8e8b15dea340c12b017cae09d05b2fc38785bdeaa23596725f6a044523e6e979.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8e8b15dea340c12b017cae09d05b2fc38785bdeaa23596725f6a044523e6e979.exe
Resource
win10v2004-20221111-en
General
-
Target
8e8b15dea340c12b017cae09d05b2fc38785bdeaa23596725f6a044523e6e979
-
Size
931KB
-
MD5
7fa3ba8fdcd26a3e92f82b4d0bdfeb17
-
SHA1
aa6c3e677ceacdd1bb29d4387b5360f2c555913b
-
SHA256
8e8b15dea340c12b017cae09d05b2fc38785bdeaa23596725f6a044523e6e979
-
SHA512
f904befbfe3f67bc0e8238fbf574911f89a98b57ead6475b325b21b8650d569dcca3bf62c876f364328c80f76d91cf6b1dbace03c6e577b10cdca11477af881f
-
SSDEEP
24576:iA0JOjHNehnoTClpkNlg6khTvdD47h0nWiOmaDf5KP:UIjohxkNGo7mWiTarO
Malware Config
Signatures
Files
-
8e8b15dea340c12b017cae09d05b2fc38785bdeaa23596725f6a044523e6e979.exe windows x86
c3eede2e170b92d11ce26e964f94e9d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetMailslotInfo
GetEnvironmentStringsW
CopyFileA
GetEnvironmentStrings
GetConsoleMode
GetTimeFormatA
GetOEMCP
VirtualFree
GetCurrentThread
Sleep
GetConsoleCP
TlsFree
GetProcessHeap
HeapFree
TerminateProcess
IsBadWritePtr
TlsAlloc
QueryPerformanceCounter
GetLocaleInfoW
GetCurrentProcess
GetStdHandle
EnumSystemLocalesA
FileTimeToSystemTime
EnterCriticalSection
CreateMailslotA
CreateFileA
GetCurrentProcessId
RtlUnwind
SetEnvironmentVariableA
GetDateFormatA
GetFileType
HeapDestroy
GetConsoleOutputCP
GetACP
WriteFile
ExitProcess
InterlockedIncrement
ReadFile
SetStdHandle
IsValidLocale
RemoveDirectoryW
CompareStringA
HeapAlloc
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
LCMapStringW
GetTimeZoneInformation
EnumTimeFormatsW
InitializeCriticalSection
GetVersionExA
SetConsoleCtrlHandler
WideCharToMultiByte
WriteConsoleA
SetFilePointer
GetSystemTimeAsFileTime
HeapSize
InterlockedDecrement
GetCommandLineA
GetProfileStringA
GetCPInfo
GetThreadPriority
GetLocaleInfoA
LoadLibraryExW
WriteConsoleW
GetLastError
VirtualQuery
InterlockedExchange
IsValidCodePage
IsDebuggerPresent
FreeLibrary
GetStringTypeA
HeapReAlloc
TlsSetValue
LoadLibraryA
OpenMutexA
GetStringTypeW
FreeEnvironmentStringsA
EnumCalendarInfoExW
ReadConsoleOutputCharacterW
TlsGetValue
SetUnhandledExceptionFilter
GetTickCount
GetProcAddress
WriteConsoleOutputCharacterW
CompareStringW
SetLastError
HeapCreate
SetHandleCount
LCMapStringA
CreateMutexA
GetModuleHandleA
GetUserDefaultLCID
DeleteCriticalSection
UnhandledExceptionFilter
GetModuleFileNameA
SetConsoleScreenBufferSize
LeaveCriticalSection
VirtualAlloc
GetStartupInfoA
FlushFileBuffers
user32
DestroyWindow
GetClassNameA
SetUserObjectInformationA
MessageBoxA
ShowWindow
DefWindowProcW
RegisterClassA
CreateWindowExW
RegisterClassExA
ToAscii
GetClipboardViewer
comctl32
ImageList_GetImageInfo
InitCommonControlsEx
DrawStatusText
CreateStatusWindowW
InitMUILanguage
ImageList_DrawIndirect
ImageList_GetImageCount
Sections
.text Size: 334KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 513KB - Virtual size: 505KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ