Static task
static1
Behavioral task
behavioral1
Sample
8323548ebe91316216beb764fc6e7d3d35408499f32ec0578be185295b90027b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8323548ebe91316216beb764fc6e7d3d35408499f32ec0578be185295b90027b.exe
Resource
win10v2004-20220812-en
General
-
Target
8323548ebe91316216beb764fc6e7d3d35408499f32ec0578be185295b90027b
-
Size
235KB
-
MD5
f54186d4d22b37b1bfbf4701988f2786
-
SHA1
068bc593310aa294f03a9bad2553092276441da2
-
SHA256
8323548ebe91316216beb764fc6e7d3d35408499f32ec0578be185295b90027b
-
SHA512
1ddef18ccaff10351827b835245565169c9c9f77486493364f95ff01531a30a256dd3696a66930058704212bd41f157ffcaea3338e0c7715fc1a45774126e56f
-
SSDEEP
3072:U1hNhzkKUwVJcZ9PZ8mQi6m/JAG7VxrEnK7AtiodKWRiKRn7lvS8UAl36KcrxHuN:UhUwzcfR8m42zh2nbi4RiK3S8UAldfN
Malware Config
Signatures
Files
-
8323548ebe91316216beb764fc6e7d3d35408499f32ec0578be185295b90027b.exe windows x86
2b79f981f15e752425e181a5df4e198e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BuildCommDCBA
lstrcpynA
WaitForMultipleObjects
SetFileTime
ExitProcess
Beep
ReadConsoleOutputCharacterW
PeekConsoleInputW
LocalShrink
LoadLibraryA
IsDBCSLeadByteEx
Heap32First
GetFirmwareEnvironmentVariableW
GetFileType
GetDateFormatA
user32
SetProcessWindowStation
SetCaretPos
MonitorFromRect
IMPSetIMEW
GetScrollPos
GetRawInputBuffer
GetMenuBarInfo
GetClassLongA
FindWindowExA
EnumDisplayDevicesA
DrawCaption
DdeClientTransaction
PtInRect
advapi32
QueryServiceLockStatusW
MapGenericMask
LsaICLookupSidsWithCreds
LookupPrivilegeValueW
I_ScSetServiceBitsW
GetSidLengthRequired
GetCurrentHwProfileA
FreeInheritedFromArray
EnumServicesStatusExW
ElfClearEventLogFileW
CryptGetKeyParam
CredGetTargetInfoA
BuildTrusteeWithObjectsAndSidW
BuildImpersonateTrusteeA
BuildImpersonateExplicitAccessWithNameA
StartServiceA
gdi32
AddFontResourceA
CreateEllipticRgn
CreateRectRgn
GdiPlayDCScript
GetClipBox
GetDIBits
GetObjectType
SetMagicColors
ntdll
ZwAllocateVirtualMemory
RtlTimeToTimeFields
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ