Static task
static1
Behavioral task
behavioral1
Sample
8a415842b46971488d6f0759fb07ecfaea20f6b4c55a41227ff1b031b84641ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a415842b46971488d6f0759fb07ecfaea20f6b4c55a41227ff1b031b84641ef.exe
Resource
win10v2004-20220812-en
General
-
Target
8a415842b46971488d6f0759fb07ecfaea20f6b4c55a41227ff1b031b84641ef
-
Size
413KB
-
MD5
8e8eb0d5ce57148b0ce36eeabf951b33
-
SHA1
ec53e6c7d17977c8ea1ef18f0523f71fbe90c43c
-
SHA256
8a415842b46971488d6f0759fb07ecfaea20f6b4c55a41227ff1b031b84641ef
-
SHA512
a7beb2f399ecb413f6ba8d9ef1d86f46244767777b6c6824ce97bdefacc9eb68d9f1add47d7c359e88b0152072c6a9668abb685e79b38f0ebd83509e9530a6ce
-
SSDEEP
6144:dYWXQ7r0pjst48BVA0gP+VdQnQCgIwe/xSqF5loDOvOYbHgG8vpCWS9cXASj8k:YAjCvM0hdCQEptoqvO6AG8Md9cQS
Malware Config
Signatures
Files
-
8a415842b46971488d6f0759fb07ecfaea20f6b4c55a41227ff1b031b84641ef.exe windows x86
7b72d7a97d7c302fbca304502760645c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetProfileIntA
EnterCriticalSection
EnumDateFormatsA
GetUserDefaultLangID
GlobalFree
GlobalFlags
CreateMailslotA
GetTapeStatus
VirtualAlloc
GetProfileStringA
GetVolumePathNameA
GetModuleHandleA
LocalHandle
GetStdHandle
GetProcessHeap
CloseHandle
CreateJobSet
FindAtomA
GetOEMCP
ExitProcess
user32
BeginPaint
GetForegroundWindow
ShowWindow
GetActiveWindow
ValidateRect
GetWindowTextA
CloseWindow
DrawEdge
RegisterClassA
IsIconic
GetWindow
GetClassInfoExA
GetDC
GetFocus
ReleaseDC
EndPaint
GetClassNameA
GetParent
GetWindowTextLengthA
gdi32
GetCharWidthA
GetColorSpace
ExtCreatePen
CreateDIBitmap
CreateDCA
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ