Static task
static1
Behavioral task
behavioral1
Sample
8a7d58c3da542ba582c42e3a698b46589d117868b77ef9954e418ca859618e3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a7d58c3da542ba582c42e3a698b46589d117868b77ef9954e418ca859618e3d.exe
Resource
win10v2004-20220901-en
General
-
Target
8a7d58c3da542ba582c42e3a698b46589d117868b77ef9954e418ca859618e3d
-
Size
755KB
-
MD5
872fad50aa6394051e2a25f2b92a7359
-
SHA1
939bdab100cfc8fc92373712f0f34024996b6146
-
SHA256
8a7d58c3da542ba582c42e3a698b46589d117868b77ef9954e418ca859618e3d
-
SHA512
c2b6be23f8f71915bc2f3d6f528e0a003831393ade666952cfc086875b84b60103b7bded4055c32ba0bb1ebea325ecee4e775f0bb2c65281614c3c04ffc50663
-
SSDEEP
12288:2xTJTZTJTJTpOv+JVeD/1t8W+EDp5RtajD1zRIYJ0cYVD000S6TJTJTJTJTJT:2xd9dd9k/1t84FMjDF+RRH6ddddd
Malware Config
Signatures
Files
-
8a7d58c3da542ba582c42e3a698b46589d117868b77ef9954e418ca859618e3d.exe windows x86
1e251d8232fd39d6318c25cff72bb28d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExA
CreateWindowExA
ShowWindow
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
PostQuitMessage
kernel32
TlsGetValue
Sleep
HeapAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 663KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE