Static task
static1
Behavioral task
behavioral1
Sample
8b6595c888c1feccb282db4b21b7634916890afc4ed00822c3eb205a1401d1bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8b6595c888c1feccb282db4b21b7634916890afc4ed00822c3eb205a1401d1bd.exe
Resource
win10v2004-20220812-en
General
-
Target
8b6595c888c1feccb282db4b21b7634916890afc4ed00822c3eb205a1401d1bd
-
Size
536KB
-
MD5
c7847feab1d6d0efca9740a46672517e
-
SHA1
b0857ac20b02590a23258d16d3d6fac6416c430a
-
SHA256
8b6595c888c1feccb282db4b21b7634916890afc4ed00822c3eb205a1401d1bd
-
SHA512
3cc2154906726da9a89c2abe948f7048fd080c9e0dd1cb724f3e17cefef32d4c188bb7ae37b9fcb303644a083168fb9dffa6273f024f1d9f57e35f1d5e5b0b51
-
SSDEEP
12288:33+bM5f1yt0PM6l6DHXPBfJVOXaP/jPt00/3ZP8:3wM5f1ytgBl6bFJVOXaDF00u
Malware Config
Signatures
Files
-
8b6595c888c1feccb282db4b21b7634916890afc4ed00822c3eb205a1401d1bd.exe windows x86
a45a3aabef7a203829313287558683f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetStartupInfoA
CreateFileW
GetModuleFileNameW
FindClose
DeleteFileA
lstrlenA
GetConsoleTitleA
CloseHandle
GetFileTime
LocalFlags
CreateFileMappingW
Sleep
DeviceIoControl
HeapCreate
GetModuleHandleA
LocalSize
GetDriveTypeW
GetCommandLineA
IsDebuggerPresent
user32
DispatchMessageA
IsZoomed
GetIconInfo
DrawTextW
CallWindowProcW
DestroyWindow
IsWindow
PeekMessageA
BeginPaint
LoadImageA
GetWindowLongW
DispatchMessageA
DestroyMenu
dpwsockx
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
imagehlp
ImageUnload
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ