Static task
static1
Behavioral task
behavioral1
Sample
8f7ae848d44c8875f155fa30f098da0489262c86e35471696ca55fed40081bd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f7ae848d44c8875f155fa30f098da0489262c86e35471696ca55fed40081bd1.exe
Resource
win10v2004-20220812-en
General
-
Target
8f7ae848d44c8875f155fa30f098da0489262c86e35471696ca55fed40081bd1
-
Size
618KB
-
MD5
17346c35075dbd72e9041b155b467b14
-
SHA1
858aa178268218649b8490efc298dbaef613b5b7
-
SHA256
8f7ae848d44c8875f155fa30f098da0489262c86e35471696ca55fed40081bd1
-
SHA512
a7a6dc3e14c07e4bec5e188b7c58b4b95d38e07591f505fccaf2486692e538bba2d444468c24b8b829188dcb94c35fe02b5c7e7ab78da3dcc7fc750cb07f31d2
-
SSDEEP
12288:1Cm4i+wwT1KX8fnhZyuIZ4EjhXoKmvYqkqk89HV5VWF4a8UhSJRzPa:oU+wwxKX8fnhoxh4K4YbB89HV5QF5i3
Malware Config
Signatures
Files
-
8f7ae848d44c8875f155fa30f098da0489262c86e35471696ca55fed40081bd1.exe windows x86
cfed7b8f2101ae33e8352640c715f72c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
WaitForSingleObject
CreateThread
FindNextFileA
SetLastError
DeleteFileA
GetLastError
FindFirstFileA
CreateFileA
CopyFileA
GetModuleFileNameA
GetVolumeInformationA
ExitProcess
TerminateThread
Process32Next
GetTickCount
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
CreateMutexA
GetCommandLineA
GetDriveTypeA
GetLogicalDriveStringsA
CreateFileW
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateDirectoryA
Sleep
SetFileAttributesA
GetVersionExA
CloseHandle
GetNativeSystemInfo
GetLocaleInfoA
GetStringTypeW
GetLocaleInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsValidCodePage
GetOEMCP
GetACP
HeapDestroy
HeapCreate
HeapQueryInformation
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
RaiseException
lstrlenA
LoadLibraryW
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
IsBadReadPtr
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
ReadFile
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleHandleW
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
FatalAppExitA
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
HeapReAlloc
HeapSize
SetEndOfFile
user32
FindWindowA
ShowWindow
GetLastInputInfo
GetDC
gdi32
GetPixel
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
ws2_32
recv
send
connect
htons
gethostbyname
socket
WSAGetLastError
WSAStartup
closesocket
Sections
.textbss Size: - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 489KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ