Static task
static1
Behavioral task
behavioral1
Sample
8bd9433dddd65f9451fdabcd86a2073e76cbea164547c974cecbaf2e53a0be44.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8bd9433dddd65f9451fdabcd86a2073e76cbea164547c974cecbaf2e53a0be44.exe
Resource
win10v2004-20220812-en
General
-
Target
8bd9433dddd65f9451fdabcd86a2073e76cbea164547c974cecbaf2e53a0be44
-
Size
100KB
-
MD5
1f6668a3cd7fdd3bd6ebaf0676f7b9bb
-
SHA1
118a43664affece225972b265e8ca46e635aa0b8
-
SHA256
8bd9433dddd65f9451fdabcd86a2073e76cbea164547c974cecbaf2e53a0be44
-
SHA512
1c7d9056354c3a902d5b783242f4cd7e8d8b80c1a85e14162307966463654aebf089b940069e73bb9eae0bb37ffae77ca3ed2be78b0fe116b17f78e8897f9254
-
SSDEEP
768:L8BKbIbCkvbaWglxweOpNgeIOX5PWkpB7eLUqOU1j5imJyI32EBDti6o9JqacoN5:AKbYWreVVpPvUOUimJyIvcwDy9D
Malware Config
Signatures
Files
-
8bd9433dddd65f9451fdabcd86a2073e76cbea164547c974cecbaf2e53a0be44.exe windows x86
56d06eecfb04e2cba8702ff693d59c75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
DeregisterEventSource
ReportEventW
LookupAccountNameW
GetUserNameW
RegisterEventSourceW
IsTextUnicode
ImpersonateLoggedOnUser
RegCloseKey
RegOpenKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
kernel32
WriteFile
WideCharToMultiByte
GetACP
WriteConsoleW
GetFileType
ExitProcess
MultiByteToWideChar
GetCommandLineA
GetCommandLineW
GetModuleHandleA
GetCPInfo
lstrlenW
FindClose
FindFirstFileA
GetFileAttributesA
FindFirstFileW
GetFileAttributesW
GetCurrentThreadId
CloseHandle
GetStdHandle
CreateThread
GetLastError
SetEvent
EnterCriticalSection
GetVersionExA
ReadFile
FreeLibrary
DeleteFileA
GetProcAddress
LoadLibraryA
CreateFileA
InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameA
GetModuleFileNameW
GetTickCount
GetUserDefaultLCID
FormatMessageA
LocalFree
LocalAlloc
FormatMessageW
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
UnmapViewOfFile
CreateFileW
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrlenA
GetLocaleInfoA
lstrcpyA
GetPrivateProfileStringA
GetPrivateProfileStringW
CreateEventA
GetPrivateProfileIntW
GetFullPathNameA
GetFullPathNameW
LeaveCriticalSection
GetPrivateProfileIntA
user32
LoadStringW
CharNextA
LoadStringA
wsprintfW
wsprintfA
GetActiveWindow
CreateWindowExA
PeekMessageA
GetClassInfoA
RegisterClassA
SetWindowLongA
DefWindowProcA
PostQuitMessage
GetMessageA
GetWindowLongA
SetTimer
EnumThreadWindows
MsgWaitForMultipleObjects
PostMessageA
SendMessageA
TranslateMessage
KillTimer
IsWindowVisible
GetParent
DispatchMessageA
ole32
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitialize
CreateBindCtx
CLSIDFromProgID
MkParseDisplayName
CLSIDFromString
CreateFileMoniker
CoGetClassObject
CoRegisterMessageFilter
oleaut32
SysFreeString
SafeArrayPutElement
SysAllocString
LoadRegTypeLi
VariantInit
CreateErrorInfo
SafeArrayCopy
VariantClear
SafeArrayCreate
SafeArrayGetLBound
SysStringLen
SafeArrayGetUBound
SysAllocStringLen
SetErrorInfo
VariantCopy
VariantChangeType
SysAllocStringByteLen
SafeArrayGetElement
SafeArrayDestroy
LoadTypeLi
imm32
ImmGetDefaultIMEWnd
version
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoW
msvcrt
_ftol
tmpnam
wcsrchr
malloc
free
_itow
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ