Static task
static1
Behavioral task
behavioral1
Sample
8adfdc5175958cce449223810fd66479a8a317cca9e2360fd2b8231f44b022b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8adfdc5175958cce449223810fd66479a8a317cca9e2360fd2b8231f44b022b9.exe
Resource
win10v2004-20221111-en
General
-
Target
8adfdc5175958cce449223810fd66479a8a317cca9e2360fd2b8231f44b022b9
-
Size
152KB
-
MD5
cbf0768737b974880885518cc1677d07
-
SHA1
f4be57b7de67d080c25ed125c73919d0aeb1ea45
-
SHA256
8adfdc5175958cce449223810fd66479a8a317cca9e2360fd2b8231f44b022b9
-
SHA512
94efa03df9a7c054b6622566a902fef334e325ce33e9bc956defb7dbcadcbcc9a4d84df4d72a6b2038ada89226709c4d425d6b481100f42d28d486abcb9fd2e8
-
SSDEEP
3072:QyDCmNazfObzS+d/RJCrQmovK/mdvFp4OaUpbmVuRPgs+/MjOn1Y6LToD8:QyDCmNofUS+d/RJCrQnKedvFqOFzPg75
Malware Config
Signatures
Files
-
8adfdc5175958cce449223810fd66479a8a317cca9e2360fd2b8231f44b022b9.exe windows x86
dc81c54c5f27c48aadbff8cd4ea38266
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
GetStdHandle
GetVolumeInformationW
FoldStringW
GetProfileSectionA
Thread32Next
UnlockFile
GetProcessWorkingSetSize
InterlockedCompareExchange
FileTimeToLocalFileTime
SetUnhandledExceptionFilter
GetStartupInfoW
GetPrivateProfileStringW
GetAtomNameA
SwitchToFiber
GetFileType
SetFilePointerEx
SetConsoleTextAttribute
SetVolumeLabelA
HeapSize
LoadLibraryExA
SystemTimeToTzSpecificLocalTime
GetQueuedCompletionStatus
FreeConsole
CreateMailslotA
GetModuleHandleA
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetStringTypeW
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
user32
MapWindowPoints
IsDialogMessageW
DdeCreateDataHandle
SetCursorPos
DlgDirListComboBoxW
GetKeyboardLayoutNameW
LoadStringW
InsertMenuA
InsertMenuItemA
SendMessageA
DdeReconnect
BeginPaint
CreateMenu
CharToOemA
UnregisterHotKey
GetMessageTime
GetDlgCtrlID
SetTimer
GetUserObjectInformationW
DdeGetData
SystemParametersInfoW
GetKeyboardType
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE