Static task
static1
Behavioral task
behavioral1
Sample
8e7ad8e11e063c29f42685dbfc8d3cca09b4cd573b88b972903ca8f088354f2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e7ad8e11e063c29f42685dbfc8d3cca09b4cd573b88b972903ca8f088354f2d.exe
Resource
win10v2004-20221111-en
General
-
Target
8e7ad8e11e063c29f42685dbfc8d3cca09b4cd573b88b972903ca8f088354f2d
-
Size
250KB
-
MD5
3bddee225976968743ab7c40ef7d44c5
-
SHA1
738853a77675789df99e59f300c3071b4bfd047d
-
SHA256
8e7ad8e11e063c29f42685dbfc8d3cca09b4cd573b88b972903ca8f088354f2d
-
SHA512
9854c2d42a9ba549bcf655c4e92488c7f595a73560f666bd27599c3b6423512616d4c8a872b2383d92e5794dc4e5999dd17602dd6ceec74b0491bc596ab74040
-
SSDEEP
6144:G9aL+TmziO5hMpMGcWkOICB4F00XFVjJlyby9MMMMMMfMMMMh:T+CziO5hMmG7tBYJlybyD
Malware Config
Signatures
Files
-
8e7ad8e11e063c29f42685dbfc8d3cca09b4cd573b88b972903ca8f088354f2d.exe windows x86
b71fac9fa2abc955f53fe9d262972eb6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mapi32
ord137
ord140
ord75
ord17
ord136
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
IsBadReadPtr
InitializeCriticalSection
Sleep
RaiseException
TlsAlloc
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
GetTickCount
CreateMutexW
GetProcAddress
LoadLibraryA
advapi32
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ole32
CoCreateInstance
inseng
DownloadFile
PurgeDownloadDirectory
GetICifRWFileFromFile
rnr20
NSPStartup
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 101KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 119KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ