Static task
static1
Behavioral task
behavioral1
Sample
8b2447ccb9405feb72d2df40d0bbe1e7a2da3d99d94e5d89a83c0d538801c616.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b2447ccb9405feb72d2df40d0bbe1e7a2da3d99d94e5d89a83c0d538801c616.exe
Resource
win10v2004-20221111-en
General
-
Target
8b2447ccb9405feb72d2df40d0bbe1e7a2da3d99d94e5d89a83c0d538801c616
-
Size
277KB
-
MD5
52f4f3151939a856eb1767b93bf7ca84
-
SHA1
b1eb6e7dc0ac9009b7acd28c1b09a3e2257e00b7
-
SHA256
8b2447ccb9405feb72d2df40d0bbe1e7a2da3d99d94e5d89a83c0d538801c616
-
SHA512
fdced0774c1b0ac4cdc07b61c3c22aa391a2b28c85a219f32d855d3aa38869d400f65d0f0612f4675c3b8af1181e07cc307f9754e5f1fff09c6d34bf354da5f5
-
SSDEEP
6144:+mOocV1SeVBLbzTxQ+YLTD6Y1R64SA/wcCyuRCJMS71J/eGCRPQMCIc:5eV1SuBLbzTK+Ynm6zSAlduRCJv19e1Y
Malware Config
Signatures
Files
-
8b2447ccb9405feb72d2df40d0bbe1e7a2da3d99d94e5d89a83c0d538801c616.exe windows x86
5378c8c75ebaf4a3f6b56c72bd3c92c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
LoadLibraryW
GetCurrentProcessId
SystemTimeToFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetProcessHeap
HeapAlloc
CreateFileA
GetLocalTime
GetCPInfo
OutputDebugStringA
SetLastError
WideCharToMultiByte
CloseHandle
lstrlenW
lstrcmpA
HeapFree
GetCurrentProcess
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
MultiByteToWideChar
FindResourceW
GetACP
olecli32
LeReconnect
LeSaveToStream
LeQueryBounds
LeQueryProtocol
LeQueryOpen
LeGetUpdateOptions
LeQueryType
LeObjectConvert
LeSetBounds
LeSetData
LeQueryOutOfDate
LeObjectLong
LeRelease
printui
vPrinterPropPages
vServerPropPages
vDocumentDefaults
vQueueCreate
ConstructPrinterFriendlyName
psapi
EnumPageFilesW
EnumProcessModules
EmptyWorkingSet
EnumPageFilesA
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ