Static task
static1
Behavioral task
behavioral1
Sample
08ff11eb24ec42a01a463d18888200874bddac3d8860909fb7358d96eda9073a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08ff11eb24ec42a01a463d18888200874bddac3d8860909fb7358d96eda9073a.exe
Resource
win10v2004-20221111-en
General
-
Target
08ff11eb24ec42a01a463d18888200874bddac3d8860909fb7358d96eda9073a
-
Size
745KB
-
MD5
2b2f342236758f10343ef4e0b65bbff6
-
SHA1
194f4762939e2d400b15712e2099cfa3616e71d4
-
SHA256
08ff11eb24ec42a01a463d18888200874bddac3d8860909fb7358d96eda9073a
-
SHA512
c03f177ead3ec3ef111ee644d1b6a2fbff0225f35e6118c304a18cff4478da4f5de4916f713f42102f59dccb0c318f541be240cf41e965d97902cfca80446ab6
-
SSDEEP
12288:MX50CZpd7NtfJbwzcWECQ7U/oQJvjjjNTg4FlHmej/DPpGqNWDlcIfswZC/:kSKHfJIcjCEU/pvjjjNTg4b9EDlcOg/
Malware Config
Signatures
Files
-
08ff11eb24ec42a01a463d18888200874bddac3d8860909fb7358d96eda9073a.exe windows x86
fe01a9401f2b08fcfc3a5b658837b2aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
ExitProcess
VirtualAlloc
FindResourceA
VirtualFree
HeapCreate
IsValidCodePage
WideCharToMultiByte
CreateProcessA
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
lstrlenW
LockResource
GetEnvironmentStrings
Sleep
GlobalAlloc
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
LCMapStringW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
CompareStringA
LoadLibraryW
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
SetEvent
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetOEMCP
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
GetCurrentProcessId
SetEndOfFile
GetConsoleMode
VirtualQuery
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
lstrcmpiW
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
GetExitCodeProcess
FormatMessageW
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
SizeofResource
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
GetConsoleOutputCP
GetStdHandle
GetLastError
GetTickCount
GetModuleHandleA
GetCurrentThread
GetCurrentThreadId
InterlockedIncrement
GetCommandLineA
oleaut32
SysStringLen
SysAllocString
ole32
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
user32
IsWindowVisible
SystemParametersInfoA
GetSysColor
MessageBoxA
GetDesktopWindow
LoadCursorA
ScreenToClient
GetDlgItem
wsprintfA
SetWindowTextA
SetWindowLongA
ReleaseCapture
IsIconic
GetWindowRect
InvalidateRect
SetFocus
CreateWindowExA
EnableMenuItem
SetWindowPos
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetCursorPos
GetDC
DispatchMessageA
IsWindow
LoadBitmapA
SetForegroundWindow
SendMessageA
GetClientRect
CallWindowProcA
GetFocus
BeginPaint
SetCursor
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
msvcrt
_exit
free
Sections
.text Size: 705KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ