Static task
static1
Behavioral task
behavioral1
Sample
8da0fcf53ef5f58dfa9ecc956383b3034a0ba9536e0c3b0f07328ccd228a08bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8da0fcf53ef5f58dfa9ecc956383b3034a0ba9536e0c3b0f07328ccd228a08bb.exe
Resource
win10v2004-20220812-en
General
-
Target
8da0fcf53ef5f58dfa9ecc956383b3034a0ba9536e0c3b0f07328ccd228a08bb
-
Size
191KB
-
MD5
566ab06d67c9c5bc0398599a17ddf83e
-
SHA1
2becc8d4c7af67d67062a1675f1cfc63135f0285
-
SHA256
8da0fcf53ef5f58dfa9ecc956383b3034a0ba9536e0c3b0f07328ccd228a08bb
-
SHA512
ba2056286e4a44921ea98e65174e8083de935ab1a4d4446180fc45c1b33ac972e7329b51563610a62bf04fd4e4979f970964320dbd09aeaa2e62ca88ab98df37
-
SSDEEP
3072:+C5fuMh7BTSsXsWTO4fwzAg0FuRrXVERXZ+HEty11U:+/ITTsWC4IzAORDK4cybU
Malware Config
Signatures
Files
-
8da0fcf53ef5f58dfa9ecc956383b3034a0ba9536e0c3b0f07328ccd228a08bb.exe windows x86
f18414ffa2921dfa848820a164aebec0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendDlgItemMessageA
GetDlgItemTextA
MessageBeep
SetDlgItemTextA
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
DispatchMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
advapi32
LookupPrivilegeValueA
RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
RegQueryInfoKeyA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
gdi32
GetDeviceCaps
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
HeapSize
LCMapStringA
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
IsDBCSLeadByte
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualAlloc
CloseHandle
CreateThread
GetPrivateProfileSectionNamesW
EnumTimeFormatsW
SystemTimeToTzSpecificLocalTime
PrepareTape
RaiseException
WaitForMultipleObjectsEx
MulDiv
GetDiskFreeSpaceA
FormatMessageA
GlobalFree
CreateDirectoryA
GetStartupInfoA
LoadLibraryExA
GetCurrentDirectoryA
GetVolumeInformationA
lstrcpynA
GetDriveTypeA
GetSystemInfo
GetTempFileNameA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetFilePointer
WriteFile
ReadFile
CreateFileA
SizeofResource
LockResource
FreeResource
GetTempPathA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
LocalFree
GetVersionExA
TerminateThread
ResetEvent
SetCurrentDirectoryA
CreateEventA
SetEvent
CreateMutexA
FindResourceA
LoadResource
GetCommandLineA
GetModuleHandleA
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
RemoveDirectoryA
GetProcAddress
GetWindowsDirectoryA
_lopen
_llseek
_lclose
FindFirstFileA
lstrcmpA
SetFileAttributesA
DeleteFileA
FindNextFileA
FindClose
LoadLibraryA
GetSystemDirectoryA
GetLastError
LocalAlloc
FreeLibrary
GetModuleFileNameA
lstrcpyA
lstrcmpiA
lstrlenA
GetCurrentProcess
GetPrivateProfileIntA
GetPrivateProfileStringA
GetShortPathNameA
GetFileAttributesA
lstrcatA
HeapAlloc
GetSystemTimeAsFileTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 87.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ