Static task
static1
Behavioral task
behavioral1
Sample
8f84211bd6b10c3a7634ffe9309573fac454bb4c88fe7298993bccb390b3c96f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f84211bd6b10c3a7634ffe9309573fac454bb4c88fe7298993bccb390b3c96f.exe
Resource
win10v2004-20221111-en
General
-
Target
8f84211bd6b10c3a7634ffe9309573fac454bb4c88fe7298993bccb390b3c96f
-
Size
544KB
-
MD5
e5573870387b22123290d92b756024c3
-
SHA1
70d97e63bf7afe4aabfe7a359d3cb2ed2dd22e97
-
SHA256
8f84211bd6b10c3a7634ffe9309573fac454bb4c88fe7298993bccb390b3c96f
-
SHA512
8b0108a048e049821e6759b53412a8630db97a0f4b8f3cdf348d627c5241c36d31743c3ffb641ec02daa7cc06934dac423cbfdcd1f9253c30aa68d6bfa2683b1
-
SSDEEP
12288:g2hKymGOVGEkVQNmTw96NaimaibDhBxxB1m/:gIKymarapZlBxxBM
Malware Config
Signatures
Files
-
8f84211bd6b10c3a7634ffe9309573fac454bb4c88fe7298993bccb390b3c96f.exe windows x86
45be315f72ff95d267715088de267873
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
lstrcatA
GetTempPathA
Process32Next
Module32Next
lstrlenA
Process32First
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
Module32First
lstrcpyA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLocaleInfoW
CreateFileW
SetEndOfFile
user32
wsprintfA
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ