Static task
static1
Behavioral task
behavioral1
Sample
8207cd7e46a08aa52d8a1269b45563ecb7e01bb36ede030b3bc681bacc830f08.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8207cd7e46a08aa52d8a1269b45563ecb7e01bb36ede030b3bc681bacc830f08.exe
Resource
win10v2004-20220901-en
General
-
Target
8207cd7e46a08aa52d8a1269b45563ecb7e01bb36ede030b3bc681bacc830f08
-
Size
390KB
-
MD5
655f94379282bb1ba45fa5c8f7483c3a
-
SHA1
dd665430ede717cb69c4ac828716e4a1f6d41866
-
SHA256
8207cd7e46a08aa52d8a1269b45563ecb7e01bb36ede030b3bc681bacc830f08
-
SHA512
e217c524d80f8bdf3c547863ad4dad3943996d7cf4969511487e5d29e958b6a925a013b5d82204de7593d83d9b2cead7cfb63d5179bccf161ca7b64e863a9667
-
SSDEEP
6144:+qwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnrJ:sO1xm+QoK0t4K3gCTDYWGrYzt+NST
Malware Config
Signatures
Files
-
8207cd7e46a08aa52d8a1269b45563ecb7e01bb36ede030b3bc681bacc830f08.exe windows x86
1deea3c217c7ac2a75a9c5bb4e5c843d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetComputerNameA
LoadLibraryW
GetCommandLineW
FindVolumeClose
LocalFree
CloseHandle
CreateFileA
HeapCreate
ResetEvent
Sleep
LocalUnlock
FormatMessageA
GetTickCount
GetSystemTime
GetModuleHandleA
UnmapViewOfFile
lstrlenA
SetLastError
GetDiskFreeSpaceA
user32
CreateWindowExA
SetFocus
GetComboBoxInfo
DrawStateA
FillRect
DrawMenuBar
DispatchMessageA
GetDC
IsWindow
DrawEdge
CheckRadioButton
CallWindowProcA
GetDlgItem
advapi32
IsTokenUntrusted
FreeSid
RegDeleteKeyA
RegEnumValueA
RegCloseKey
hdwwiz.cpl
AddHardwareWizard
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ