Static task
static1
Behavioral task
behavioral1
Sample
8b049f696c5ec0c5da93adc1af7a5c88201ff8b307425939d7515a094948f236.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b049f696c5ec0c5da93adc1af7a5c88201ff8b307425939d7515a094948f236.exe
Resource
win10v2004-20220901-en
General
-
Target
8b049f696c5ec0c5da93adc1af7a5c88201ff8b307425939d7515a094948f236
-
Size
573KB
-
MD5
791af23a4620d31ed38baf490eba7384
-
SHA1
44fea30bc0aef5ed536c25e7d46a9b9d9e3a2d46
-
SHA256
8b049f696c5ec0c5da93adc1af7a5c88201ff8b307425939d7515a094948f236
-
SHA512
a0af132d19f09723dc2b23e700794c36e746869adf7f960097ff40e8767ad20307b863ebdbd159da9d39b6f7d7e63664aaabf7c54425abbb8311424c26592e03
-
SSDEEP
3072:Xy1Pmfjd0mq91J9CyENopaZ/mEhb5wuSasegzW0Cx91TiMturyRqwIb6pGjKz:XyNuqvJ9C/5Z/mEhObFq1TiMtuWmb9y
Malware Config
Signatures
Files
-
8b049f696c5ec0c5da93adc1af7a5c88201ff8b307425939d7515a094948f236.exe windows x86
365e9ec72602fed1c58e863cf247428e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgA
FindTextA
kernel32
CreateEventA
VirtualLock
GetShortPathNameW
ExitProcess
GetProcessTimes
GetPrivateProfileStringA
ReadDirectoryChangesW
GetSystemTimeAdjustment
GetAtomNameA
GetDriveTypeW
FillConsoleOutputCharacterA
OpenSemaphoreW
user32
GetDlgItemTextA
DialogBoxParamW
RemoveMenu
PostMessageA
SetRect
EndPaint
SetWindowLongA
GetMenuItemID
GetClipCursor
MessageBoxW
ScreenToClient
GetKeyboardType
GetClipboardSequenceNumber
EnumWindows
MapVirtualKeyW
IsMenu
UnregisterDeviceNotification
CharLowerW
GetMessageA
GetKeyboardLayout
CopyAcceleratorTableW
SetProcessDefaultLayout
ole32
ProgIDFromCLSID
CoReleaseMarshalData
Sections
.text Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ