Static task
static1
Behavioral task
behavioral1
Sample
8d79fdcc2c9dde4be50d9d4813e750dd11b201963af60efb63309920acdd60b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d79fdcc2c9dde4be50d9d4813e750dd11b201963af60efb63309920acdd60b8.exe
Resource
win10v2004-20221111-en
General
-
Target
8d79fdcc2c9dde4be50d9d4813e750dd11b201963af60efb63309920acdd60b8
-
Size
168KB
-
MD5
85766bda197ca4f52708411a0b3573e6
-
SHA1
676eb274925daa5dd41ec860dad0d200ddbbc6cf
-
SHA256
8d79fdcc2c9dde4be50d9d4813e750dd11b201963af60efb63309920acdd60b8
-
SHA512
4115b6efbe7f474e3a1647aed963df07e4dca74fb211ee8f76ad96dd43444207ad46b2c060fb0d90ba2c0359c4a9112bac090f5620d1baa12a59c82358aed20e
-
SSDEEP
3072:Y/j6oIMjrbikYeXQXn0gT91jI7WCAtTDjiu5i1jMbW:Y/jHIMjZYHBT91jsmT5RbW
Malware Config
Signatures
Files
-
8d79fdcc2c9dde4be50d9d4813e750dd11b201963af60efb63309920acdd60b8.exe windows x86
c4c8c45e9930f917e8edac4087564ff8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetModuleFileNameA
LoadLibraryA
VirtualAlloc
lstrcatA
GetBinaryTypeA
lstrcpynA
GetACP
GetLastError
SetLastError
GetCPInfo
GetModuleHandleA
GetCommandLineA
CloseHandle
ExitProcess
FreeConsole
lstrcpyA
OutputDebugStringA
user32
CreateMenu
GetQueueStatus
KillTimer
GetParent
GetProcessWindowStation
MessageBoxA
SetTimer
gdi32
DeleteObject
CreateCompatibleDC
comdlg32
ChooseFontA
ole32
CoInitialize
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ