Static task
static1
Behavioral task
behavioral1
Sample
8dab93f9c343366c91e0e023ea21151f4bb490d479d84af983605a6e09dec450.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8dab93f9c343366c91e0e023ea21151f4bb490d479d84af983605a6e09dec450.exe
Resource
win10v2004-20221111-en
General
-
Target
8dab93f9c343366c91e0e023ea21151f4bb490d479d84af983605a6e09dec450
-
Size
189KB
-
MD5
8676c8642e04748ba20b5a7a03f70edc
-
SHA1
11e25299ce86e3eb758b9fd94f3c77d27ccd8c47
-
SHA256
8dab93f9c343366c91e0e023ea21151f4bb490d479d84af983605a6e09dec450
-
SHA512
bce6ea161d1ca0542101c30b11aaff0fc1354202831188d96587dc8601602e646888c36519f1b1ddc250a794359772af5de2704d864e52773676e6e096639b95
-
SSDEEP
3072:mPQ5ixkuj1ein6bcITsdELUTCn4rP9X44Caxkcijg4AJ+bi+FVOAFTYeBC+9YIeF:mYgxkugi6bGdELUAgPT/xIjgBulhFLC3
Malware Config
Signatures
Files
-
8dab93f9c343366c91e0e023ea21151f4bb490d479d84af983605a6e09dec450.exe windows x86
d86eba122edd4a652ffeaa59155815a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
PathIsFileSpecA
PathAppendA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
kernel32
lstrlenW
GlobalLock
ProcessIdToSessionId
FindAtomW
GetTickCount
DeleteCriticalSection
Sleep
WaitForMultipleObjects
HeapSetInformation
LeaveCriticalSection
MultiByteToWideChar
LocalAlloc
CreateThread
EnterCriticalSection
CloseHandle
MulDiv
GetProcessId
lstrcmpW
GlobalFree
SetLastError
InterlockedExchange
GetCurrentProcess
EnumResourceLanguagesW
WaitForSingleObject
FlushInstructionCache
InterlockedDecrement
GetSystemDirectoryW
FormatMessageW
GetLocaleInfoW
GlobalAlloc
GetStringTypeW
InitializeCriticalSection
InterlockedIncrement
CreateFileW
RaiseException
GlobalUnlock
GetModuleFileNameW
OpenProcess
lstrlenA
GetComputerNameW
GlobalHandle
WideCharToMultiByte
Sections
.text Size: 99KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ