Static task
static1
Behavioral task
behavioral1
Sample
8c20d26ba3adfd8cd5e60bcb135d9c5149e177d3798e7cdae69746b6ca9528fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8c20d26ba3adfd8cd5e60bcb135d9c5149e177d3798e7cdae69746b6ca9528fc.exe
Resource
win10v2004-20220812-en
General
-
Target
8c20d26ba3adfd8cd5e60bcb135d9c5149e177d3798e7cdae69746b6ca9528fc
-
Size
181KB
-
MD5
672344d09f4b618524bbeea7cd780bfb
-
SHA1
127b3a46fa30f3d1515a00077b790216ca9d6ee0
-
SHA256
8c20d26ba3adfd8cd5e60bcb135d9c5149e177d3798e7cdae69746b6ca9528fc
-
SHA512
c3f8fcea10d67ffacb8865156b69e23df52da4ca088c6df88a2e5a142ded5c4a1a4babd4ae879dfcec3ad0ff30dba66a219288d0b64c3898b87514a24ef10598
-
SSDEEP
3072:o1z/UI0JwXIxkAc1Hpt4Wc9L6arurTJK07oYWKqFvIBLJ42:o1rGxktX4Wct6hQ91KfBLJ42
Malware Config
Signatures
Files
-
8c20d26ba3adfd8cd5e60bcb135d9c5149e177d3798e7cdae69746b6ca9528fc.exe windows x86
072e70ce30d248a1bbaa014a23a75120
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
kernel32
LocalAlloc
RemoveDirectoryW
DeleteFileA
SetFileAttributesW
FindFirstFileW
GetLastError
GetModuleFileNameA
SignalObjectAndWait
CreateDirectoryW
GetTempPathW
GetTempFileNameA
GetLocaleInfoA
OutputDebugStringA
GetProcAddress
CloseHandle
GetProcessAffinityMask
LocalFree
WriteFile
CreateFileA
LeaveCriticalSection
GetACP
CopyFileA
OutputDebugStringW
GetModuleFileNameW
GetVersionExA
GetTempPathA
GetCurrentThreadId
EnumResourceTypesW
MulDiv
InterlockedExchange
GetTickCount
CreateMutexA
MultiByteToWideChar
EnterCriticalSection
SetFileAttributesA
InitializeCriticalSection
WideCharToMultiByte
GetCurrentProcessId
TerminateProcess
CreateDirectoryA
ReadFile
GetFileAttributesA
FindClose
LoadLibraryW
SetFilePointer
FindNextFileW
DisableThreadLibraryCalls
GetSystemTime
InterlockedDecrement
Sleep
FreeLibrary
lstrlenW
InterlockedIncrement
ReleaseMutex
GetVersionExW
GetThreadLocale
DeleteCriticalSection
QueryPerformanceCounter
DeleteFileW
lstrlenA
GetTempFileNameW
WaitForSingleObject
GetSystemTimeAsFileTime
user32
OffsetRect
TranslateMessage
PeekMessageW
FillRect
GetDC
GetClientRect
SetRectEmpty
IsRectEmpty
CopyRect
wsprintfW
ReleaseDC
DispatchMessageW
GetWindowRect
avifil32
AVISaveOptions
AVIMakeCompressedStream
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ