Static task
static1
Behavioral task
behavioral1
Sample
8cdc2cd632cf4ab7cf501999ca6e74c2880863af0afdeaadf69dda96da4d9caa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cdc2cd632cf4ab7cf501999ca6e74c2880863af0afdeaadf69dda96da4d9caa.exe
Resource
win10v2004-20221111-en
General
-
Target
8cdc2cd632cf4ab7cf501999ca6e74c2880863af0afdeaadf69dda96da4d9caa
-
Size
640KB
-
MD5
2d7ff44e75b0c5733cd8626263fdd70c
-
SHA1
7f9cc14e6483c59d4ed3518c926a5991f88b0470
-
SHA256
8cdc2cd632cf4ab7cf501999ca6e74c2880863af0afdeaadf69dda96da4d9caa
-
SHA512
7fcdb5107eefc3a7f2627ff664e82ecb1650a1a18722947e0e65b148f154ffd9e19044838990141e3487f14b83b75680405192111d8182d967e07bb98ecfe662
-
SSDEEP
12288:kinJeqGxyYQn4OTdqC1zdO5MJCf/cpMfTQotYGDLMYQBpZE3wZbj2lvQkhQgfYpy:kinJeh9IqC1CMa/cKfTQVGvlAZbj2FQy
Malware Config
Signatures
Files
-
8cdc2cd632cf4ab7cf501999ca6e74c2880863af0afdeaadf69dda96da4d9caa.exe windows x86
c1815870a3396b549cb2d5628bf1b3c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
GetCommandLineA
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
InterlockedIncrement
GetOEMCP
GetFileSize
VirtualAlloc
LeaveCriticalSection
CreateFileA
FormatMessageA
FindClose
WriteConsoleA
VirtualQuery
FindResourceW
UnmapViewOfFile
GetTimeZoneInformation
ResetEvent
LCMapStringA
LocalFree
FreeLibrary
GetStringTypeW
FindNextFileA
GetSystemTimeAsFileTime
CompareStringA
CreateEventW
WriteFile
SetUnhandledExceptionFilter
GetLastError
SetFilePointer
GetStringTypeA
GetFileAttributesA
WideCharToMultiByte
LoadResource
GetProcAddress
FreeEnvironmentStringsW
HeapSize
MultiByteToWideChar
SetErrorMode
UnhandledExceptionFilter
CreateThread
LockResource
GetConsoleOutputCP
LocalAlloc
GetConsoleMode
SizeofResource
GetModuleFileNameA
GetVersionExA
GetEnvironmentStringsW
GetThreadLocale
HeapDestroy
FindFirstFileW
SetEvent
WaitForSingleObject
GetModuleFileNameW
GetSystemInfo
SetHandleCount
LCMapStringW
EnterCriticalSection
LoadLibraryExW
InitializeCriticalSection
GetVersion
ReadFile
GetCurrentThread
user32
InvalidateRect
GetSubMenu
CallWindowProcA
EndPaint
SetForegroundWindow
PostQuitMessage
TranslateMessage
SetFocus
EnableWindow
UpdateWindow
CreateWindowExA
ole32
CoCreateInstance
CoUninitialize
advapi32
RegDeleteKeyA
RegCreateKeyExA
Sections
.text Size: 606KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ