Static task
static1
Behavioral task
behavioral1
Sample
8862575941918714c1fdf28bee9c6ffd23d00746b1982d1f2d60ad76dceda4ac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8862575941918714c1fdf28bee9c6ffd23d00746b1982d1f2d60ad76dceda4ac.exe
Resource
win10v2004-20220812-en
General
-
Target
8862575941918714c1fdf28bee9c6ffd23d00746b1982d1f2d60ad76dceda4ac
-
Size
367KB
-
MD5
be18c769b074b6c33024bacf89b00545
-
SHA1
3542792f1ceea460c1a152e7d8d2bb98339e49bf
-
SHA256
8862575941918714c1fdf28bee9c6ffd23d00746b1982d1f2d60ad76dceda4ac
-
SHA512
5d1f11337e734c75428751dd527f9896561e1043975e0a8c4e23f1b6cee2b056bbadd7dfa3a7af76793023055d2bce14050dfa69f7a94705d89be12c7562c651
-
SSDEEP
6144:V8CiJn+2dlueiAg4mvZl+i0bsvQYzNtzvMOZ31jppIELz3JgtCJuigau:bi9+2jjRyl+u5znz0e31jbI0JgIo
Malware Config
Signatures
Files
-
8862575941918714c1fdf28bee9c6ffd23d00746b1982d1f2d60ad76dceda4ac.exe windows x86
29c5ee05bb5db86e1db4f9e5e7f34b11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
Imports
kernel32
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
Sleep
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetStdHandle
WriteConsoleW
HeapReAlloc
FlushFileBuffers
CreateFileW
GetCommandLineW
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetProcessHeap
HeapCreate
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
HeapAlloc
lstrcpyA
LoadLibraryA
GetModuleHandleA
QueryPerformanceCounter
EnterCriticalSection
GetCurrentProcess
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
CloseHandle
user32
EndDialog
CloseClipboard
MessageBoxA
GetFocus
GetKeyboardLayout
LoadMenuA
EmptyClipboard
CopyImage
OpenClipboard
EndPaint
LoadBitmapA
CharNextA
SetClipboardData
GetWindowRect
SetWindowPos
GetSystemMetrics
SystemParametersInfoA
DefWindowProcA
LoadIconA
LoadCursorA
CreateWindowExA
ShowWindow
SetForegroundWindow
SetFocus
IsWindowVisible
DestroyWindow
SendMessageA
GetDC
ReleaseDC
SetWindowTextA
GetClientRect
BeginPaint
DrawIconEx
gdi32
PatBlt
DeleteObject
GetObjectA
EndPage
StartDocA
StartPage
TextOutA
EnumFontsA
EndDoc
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetStockObject
shell32
CommandLineToArgvW
SHGetDesktopFolder
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
shlwapi
StrChrA
comctl32
ord17
gdiplus
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdiplusStartup
imm32
ImmSetOpenStatus
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
oledlg
ord3
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ