Static task
static1
Behavioral task
behavioral1
Sample
8f9a96f45d74b44dc74341392f6ef623aa8b53aaae25ffb0fc6faea81157577c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f9a96f45d74b44dc74341392f6ef623aa8b53aaae25ffb0fc6faea81157577c.exe
Resource
win10v2004-20221111-en
General
-
Target
8f9a96f45d74b44dc74341392f6ef623aa8b53aaae25ffb0fc6faea81157577c
-
Size
305KB
-
MD5
91d74476dfeb025447fbbfcc40035493
-
SHA1
4be59075a315c56f1250545136f52a4ee2ad3c34
-
SHA256
8f9a96f45d74b44dc74341392f6ef623aa8b53aaae25ffb0fc6faea81157577c
-
SHA512
9dfeea4de3baf1d2fd5f1b89dd77dfeaeffcdd8b6d482248aa14e26fb0b142903521f08e635f7e2feec7a7bc6333ad646994ed37a7702bcbf4b29bdba0f7f152
-
SSDEEP
6144:+Fm6IpJKy8rUdFAD6KULXdnsR8kElLlz+XEBl6n8XU9nxPiIKxm9:+FzIOy8gdG2jiQ+Y2pZivx
Malware Config
Signatures
Files
-
8f9a96f45d74b44dc74341392f6ef623aa8b53aaae25ffb0fc6faea81157577c.exe windows x86
b4ef0bcc3429d188f30b7adcc2d03015
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
lstrlenA
FindAtomW
HeapCreate
GetCurrentThreadId
SetEvent
GetDriveTypeW
GetModuleFileNameA
GetFileAttributesA
EnumCalendarInfoW
ResumeThread
CreateMailslotA
GetConsoleAliasW
LocalFree
SetLastError
FindClose
GetCurrentProcessId
GetModuleHandleA
EnterCriticalSection
GetPrivateProfileStringW
user32
GetKeyboardType
GetKeyState
GetClassInfoA
DispatchMessageA
GetClientRect
IsWindow
GetCursorInfo
SetFocus
CallWindowProcW
DispatchMessageA
GetSysColor
GetMenuInfo
DrawTextW
admparse
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ