Static task
static1
Behavioral task
behavioral1
Sample
8a736c5f608c0faa326cee59d39ca8fb80759cd4ba3890ca56dd8a951c16f8d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8a736c5f608c0faa326cee59d39ca8fb80759cd4ba3890ca56dd8a951c16f8d9.exe
Resource
win10v2004-20220812-en
General
-
Target
8a736c5f608c0faa326cee59d39ca8fb80759cd4ba3890ca56dd8a951c16f8d9
-
Size
99KB
-
MD5
76dd68800a24fcd618b6e6d04ca51bfe
-
SHA1
734035121853c3a45d2540b36a09972b215451cc
-
SHA256
8a736c5f608c0faa326cee59d39ca8fb80759cd4ba3890ca56dd8a951c16f8d9
-
SHA512
702733e2c30cf04fc30abf7c6c01d3ea9e2300c9d3e32a11716d33aa2cd4e9e552e2676330f8e62c8cbc17da405d438cc43609ac114794b7517f9909ce962e8f
-
SSDEEP
1536:9aEZtAGkgVnD/Yl6PN9VPhrVjCaIy1g1IG+7DzNv/A6:htjkgVnzGyNDeaB1A6
Malware Config
Signatures
Files
-
8a736c5f608c0faa326cee59d39ca8fb80759cd4ba3890ca56dd8a951c16f8d9.exe windows x86
9705ea116611cc59fc7cf89813aa33d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr80
_invoke_watson
_controlfp_s
_except_handler4_common
_crt_debugger_hook
_decode_pointer
_onexit
_lock
_amsg_exit
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
printf
__FrameUnwindFilter
kernel32
GetStartupInfoA
ResumeThread
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
VirtualAllocEx
GetProcAddress
SetThreadContext
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
FindResourceA
msvcm80
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ