Static task
static1
Behavioral task
behavioral1
Sample
8c14aa3003e5c27ed5b79654d50c9b7ff3b5412791bd96421af10db5ba0418d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c14aa3003e5c27ed5b79654d50c9b7ff3b5412791bd96421af10db5ba0418d6.exe
Resource
win10v2004-20220812-en
General
-
Target
8c14aa3003e5c27ed5b79654d50c9b7ff3b5412791bd96421af10db5ba0418d6
-
Size
253KB
-
MD5
552f731229657dab18fb1e6696c19fd6
-
SHA1
0c11caf39c63eebb25f1992d2fcffc65ff40ddd1
-
SHA256
8c14aa3003e5c27ed5b79654d50c9b7ff3b5412791bd96421af10db5ba0418d6
-
SHA512
9605b55665c82c9deb2eda089eb209fcc56c49aac2d30d91d55a9841e36f5b1a6aae1fbfc14e33c9e7ebe07d349508f82100048c6b3d69120700a42ed120c321
-
SSDEEP
3072:nUOH5HiQu0O2BOEDnwDeTn/kGUWNYXWImQ0SetWkuP+17/YpMfMrc7stXbDwL5+Y:nNfu0BHDn/iHmGkuPQZMA0+YRX5Yb
Malware Config
Signatures
Files
-
8c14aa3003e5c27ed5b79654d50c9b7ff3b5412791bd96421af10db5ba0418d6.exe windows x86
fe8bc517a00c0ee85d8545519e53d8d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcessHeap
CompareStringW
GlobalLock
IsBadWritePtr
GetProcAddress
WideCharToMultiByte
lstrlenA
InitializeCriticalSection
WaitForSingleObject
user32
GetSystemMenu
GetWindowTextW
GetSystemMetrics
DestroyWindow
GetCursorPos
BeginDeferWindowPos
SendMessageTimeoutW
gdi32
CreateBitmap
ws2_32
connect
WSAStartup
recv
shutdown
ioctlsocket
closesocket
send
select
msvcrt
wcsrchr
realloc
wcscpy
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 216KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ