Static task
static1
Behavioral task
behavioral1
Sample
8e87d7f4099696430f1dff2d464548bbd59ae13a0ac5099c8b65ca9aa10271f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8e87d7f4099696430f1dff2d464548bbd59ae13a0ac5099c8b65ca9aa10271f3.exe
Resource
win10v2004-20220812-en
General
-
Target
8e87d7f4099696430f1dff2d464548bbd59ae13a0ac5099c8b65ca9aa10271f3
-
Size
661KB
-
MD5
60864546c4dcabcd5c070fff35f5c451
-
SHA1
1178479eeab458a145f7779c427b0c7d326c6165
-
SHA256
8e87d7f4099696430f1dff2d464548bbd59ae13a0ac5099c8b65ca9aa10271f3
-
SHA512
b3abca39e230c7ce5498fd4a8edcd655bca821034de4e9574fdd6298de3e998a08ee74a981077292b9ec5202c7375b6a04fbef7295f6fee4e692269bbff1ac5c
-
SSDEEP
12288:orQeeVN067JySrmypF5+C9ruQ9bTHFiGsjNEXuJcv1bwANv7SjgZhgg2jxf:9B067JySrmypFhruQHAhEe+dbHYgrF2h
Malware Config
Signatures
Files
-
8e87d7f4099696430f1dff2d464548bbd59ae13a0ac5099c8b65ca9aa10271f3.exe windows x86
70df90e8d9a56035dbadbb97ff081413
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetConsoleCP
HeapReAlloc
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetConsoleMode
HeapAlloc
GetProcessHeap
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
CloseHandle
WriteConsoleW
SetStdHandle
LocalFree
GetCurrentThreadId
GetModuleHandleA
LocalAlloc
GetLocalTime
GetProcessHeaps
GetModuleFileNameW
GetStdHandle
WriteFile
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateFileW
GetLastError
GetTimeFormatW
HeapCreate
LoadLibraryW
GlobalAlloc
FreeEnvironmentStringsW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
GetDateFormatW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
IsProcessorFeaturePresent
HeapFree
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
user32
SendMessageW
SetClipboardData
OpenClipboard
DispatchMessageA
GetSysColorBrush
RegisterClassW
LoadCursorA
UpdateWindow
GetWindowTextLengthW
GetMessageA
RegisterClassExA
LoadImageW
AttachThreadInput
LoadMenuA
LoadIconA
IsWindowEnabled
GetClientRect
SendMessageA
GetClassInfoW
GetDC
TranslateMessage
UnregisterClassA
GetWindowTextW
CreateWindowExA
EmptyClipboard
GetDlgItem
GetMenuItemInfoA
LoadStringW
GetMenuStringA
ShowWindow
SetMenu
gdi32
EndPage
StartPage
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
SetBkMode
DeleteObject
SelectObject
StartDocA
SetTextAlign
GetObjectA
EndDoc
GetStockObject
TextOutA
advapi32
InitializeSecurityDescriptor
ole32
RegisterDragDrop
CreatePointerMoniker
CoInitialize
CoCreateInstance
oleaut32
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
winmm
timeGetDevCaps
version
GetFileVersionInfoW
crypt32
CertGetNameStringA
comctl32
ImageList_Create
activeds
ord3
rasapi32
RasGetConnectionStatistics
aclui
ord1
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 425KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ