Static task
static1
Behavioral task
behavioral1
Sample
8f48f7b3bc73377083b9fa254ab392418677b85b80156ba98ebcd5c276a42ebb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f48f7b3bc73377083b9fa254ab392418677b85b80156ba98ebcd5c276a42ebb.exe
Resource
win10v2004-20221111-en
General
-
Target
8f48f7b3bc73377083b9fa254ab392418677b85b80156ba98ebcd5c276a42ebb
-
Size
864KB
-
MD5
5dd7150689783dc2b2f3fa819b6ed165
-
SHA1
736ac5e84ba4d85c4eb66bdddfa444f20edb36d5
-
SHA256
8f48f7b3bc73377083b9fa254ab392418677b85b80156ba98ebcd5c276a42ebb
-
SHA512
65c5d7b4269d5a7b0af16507729920c08cd5a7bc3d31e07dd5fbe64e8efeb56195b6a5b056e92b100f4dba9515fbf8f2b0d5106e2b20c501139eb9418c3c5adf
-
SSDEEP
24576:fpm8LsZAOEViGliLeBomUyeOvUXvcFG2vRKutr5OU7mh6f3Kjh:fploOvRKuXcIf3Kj
Malware Config
Signatures
Files
-
8f48f7b3bc73377083b9fa254ab392418677b85b80156ba98ebcd5c276a42ebb.exe windows x86
d978836916abda74ce2b045fa5144b1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
modf
memmove
sprintf
strncmp
strncpy
_ftol
??2@YAPAXI@Z
strrchr
??3@YAXPAX@Z
_strnicmp
kernel32
GetModuleFileNameA
SetFileAttributesA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
CloseHandle
Process32Next
GetProcessHeap
GetModuleHandleA
ExitProcess
Sleep
HeapReAlloc
HeapFree
IsBadReadPtr
WriteFile
CreateFileA
HeapAlloc
user32
MessageBoxA
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 836KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ