Static task
static1
Behavioral task
behavioral1
Sample
8f8e63aae2347aa8cc3a150e15d84c8a9174dc2e2270d033d685664dfba48dce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f8e63aae2347aa8cc3a150e15d84c8a9174dc2e2270d033d685664dfba48dce.exe
Resource
win10v2004-20220812-en
General
-
Target
8f8e63aae2347aa8cc3a150e15d84c8a9174dc2e2270d033d685664dfba48dce
-
Size
120KB
-
MD5
2731186bd3c126dedb488ba79dce3680
-
SHA1
a74325998a63776d9e9f777c5a469e1eb1082b22
-
SHA256
8f8e63aae2347aa8cc3a150e15d84c8a9174dc2e2270d033d685664dfba48dce
-
SHA512
88a0dc7e3d83e571b6430494eec8238442edfd3f0776b5b61478d5f2ecffea55ab2a7114a1ae9332913fcf345286cb7670c607b2ffae6fcaabaf62c640c03d23
-
SSDEEP
1536:Rm2/bIEXu1rwqnBUvIzm68LuqMYICEK60+Gt3HheC:k2D4rwqBq/xo0+Gj
Malware Config
Signatures
Files
-
8f8e63aae2347aa8cc3a150e15d84c8a9174dc2e2270d033d685664dfba48dce.exe windows x86
3c9d7c52bbc707fc6d00dc462a4c5b16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetVersion
lstrcmpiA
lstrlenW
lstrcmpiW
lstrlenA
GetModuleFileNameA
CompareStringA
CompareStringW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
InitializeCriticalSection
DeleteCriticalSection
LocalFree
LocalAlloc
GetModuleHandleA
GetStartupInfoA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
RaiseException
user32
UnregisterClassA
CharLowerA
CharLowerW
CharUpperW
CharUpperA
ole32
OleUninitialize
OleInitialize
wrun32
ord25
ord16
mfc71
ord4038
ord4014
ord6278
ord3801
ord6276
ord4326
ord2063
ord2018
ord5583
ord3806
ord1010
ord5102
ord6219
ord5382
ord3832
ord1920
ord1187
ord5224
ord5226
ord2248
ord3948
ord4568
ord5230
ord5213
ord5566
ord2537
ord2731
ord2835
ord4307
ord2714
ord2838
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4481
ord4261
ord3333
ord566
ord757
ord3830
ord1054
ord314
ord764
ord1209
ord1084
ord1092
ord1167
ord581
ord1191
ord3683
ord4541
ord1177
ord1175
ord1201
ord1120
ord371
ord1098
ord1208
ord1206
ord1037
ord315
ord765
ord2931
ord1207
msvcr71
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__security_error_handler
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_controlfp
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??2@YAPAXI@Z
memset
__CxxFrameHandler
_setmbcp
realloc
memmove
wcscpy
_except_handler3
_resetstkoflw
free
malloc
__setusermatherr
oleaut32
SysFreeString
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ