Static task
static1
Behavioral task
behavioral1
Sample
0c8ee579e81b4accb13dec716ed3f757568062f6c83ba685542af0f1b5a49aab.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0c8ee579e81b4accb13dec716ed3f757568062f6c83ba685542af0f1b5a49aab.exe
Resource
win10v2004-20221111-en
General
-
Target
0c8ee579e81b4accb13dec716ed3f757568062f6c83ba685542af0f1b5a49aab
-
Size
32KB
-
MD5
ad8a015d2527fabd393110c52f77aadd
-
SHA1
d9e33a1d40856721bddb9b9399be454916fb86c2
-
SHA256
0c8ee579e81b4accb13dec716ed3f757568062f6c83ba685542af0f1b5a49aab
-
SHA512
24eddf99954948c549f6ea0146475dd493d0adb5b9896466b5a2d4c0168c3ef14cdbd74f92ff77f51d58fc663984f5f47b0ee333b77b8268ccdebf9b1c2806c2
-
SSDEEP
768:mmrRpLvJY2NdgLri5IoZSAzcwf3qeevdc9mnYIuC:moZvrNdgLu5IoZSAzcwf3qeevdcInq
Malware Config
Signatures
Files
-
0c8ee579e81b4accb13dec716ed3f757568062f6c83ba685542af0f1b5a49aab.exe windows x86
0f3d1ee181bd33120d313eb57f6c2261
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageW
DestroyWindow
DefWindowProcW
PostQuitMessage
BeginPaint
EndPaint
CreateWindowExW
ShowWindow
UpdateWindow
LoadIconW
LoadCursorW
RegisterClassExW
LoadStringW
GetMessageW
TranslateMessage
DispatchMessageW
kernel32
InterlockedIncrement
HeapAlloc
GetCurrentDirectoryW
LoadLibraryA
GetProcessHeap
GetModuleHandleA
SetFileAttributesA
GetDiskFreeSpaceA
GetLocalTime
GetStartupInfoA
InterlockedDecrement
GetCurrentDirectoryA
crtdll
__GetMainArgs
_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
_exit
_initterm
_acmdln_dll
exit
_XcptFilter
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ