Static task
static1
Behavioral task
behavioral1
Sample
8d923bbb10aba858144bc3128cd95d9ddd38e223825be12f9f9724007c6a03bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d923bbb10aba858144bc3128cd95d9ddd38e223825be12f9f9724007c6a03bc.exe
Resource
win10v2004-20221111-en
General
-
Target
8d923bbb10aba858144bc3128cd95d9ddd38e223825be12f9f9724007c6a03bc
-
Size
827KB
-
MD5
2a79847b4960b328ba775586a10b550c
-
SHA1
a4154ece92d62349c88e57693838c5177dc8585e
-
SHA256
8d923bbb10aba858144bc3128cd95d9ddd38e223825be12f9f9724007c6a03bc
-
SHA512
0e67c0c858834dbe0a438a95a2e0df035941d3cefdeb324b75d35d7f1a96ec95cf0d4b83b67d47c4cb04d781143bb80a5fbd4197ba279d989dd5ea56ac97983e
-
SSDEEP
12288:lnsLiNnhOxw3247pHGYg0je5wVVEXGk+oVRbamiWBRZeTSrfd0Aesjk3:lsmNn8f47pH7peaV6WpojbPhR10dsjC
Malware Config
Signatures
Files
-
8d923bbb10aba858144bc3128cd95d9ddd38e223825be12f9f9724007c6a03bc.exe windows x86
aff41162b18f83e2008b72720d404b9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
RegisterConsoleIME
GetModuleHandleW
GetUserGeoID
UnregisterConsoleIME
GetFullPathNameA
CloseProfileUserMapping
GetLocaleInfoW
ReleaseSemaphore
SetVolumeLabelW
SetConsoleCursorMode
GetBinaryTypeW
GetVolumeInformationW
GetCurrentDirectoryA
GetPriorityClass
LoadLibraryW
RegisterWaitForSingleObject
SetThreadExecutionState
GetCurrentThread
msvcirt
?rdbuf@strstream@@QBEPAVstrstreambuf@@XZ
?base@streambuf@@IBEPADXZ
??0exception@@QAE@ABV0@@Z
??_Efilebuf@@UAEPAXI@Z
?good@ios@@QBEHXZ
?clear@ios@@QAEXH@Z
??6ostream@@QAEAAV0@C@Z
?clog@@3Vostream_withassign@@A
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
?attach@ifstream@@QAEXH@Z
??_Estdiostream@@UAEPAXI@Z
?flush@@YAAAVostream@@AAV1@@Z
??_Dofstream@@QAEXXZ
?get@istream@@QAEAAV1@AAD@Z
??0ifstream@@QAE@XZ
?read@istream@@QAEAAV1@PADH@Z
?iword@ios@@QBEAAJH@Z
??0strstream@@QAE@PADHH@Z
??5istream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??_Gostrstream@@UAEPAXI@Z
cmutil
IsFarEastNonOSR2Win95
CmStrCpyAllocA
?GetHInst@CIniA@@QBEPAUHINSTANCE__@@XZ
?Start@CmLogFile@@QAEJH@Z
?SetPrimaryRegPath@CIniW@@QAEXPBG@Z
?CloseFile@CmLogFile@@AAEJXZ
??_FCIniA@@QAEXXZ
?Clear@CIniA@@QAEXXZ
?GPPB@CIniA@@QBEHPBD0H@Z
?SetEntryFromIdx@CIniA@@QAEXK@Z
??0CRandom@@QAE@I@Z
?GPPS@CIniW@@QBEPAGPBG00@Z
GetOSMajorVersion
CmEndOfStrW
?LoadEntry@CIniW@@IBEPAGPBG@Z
?SetICSDataPath@CIniW@@QAEXPBG@Z
?Clear@CIniW@@QAEXXZ
?WPPB@CIniA@@QAEXPBD0H@Z
?GetSection@CIniA@@QBEPBDXZ
CmLoadIconW
CmRealloc
??0CmLogFile@@QAE@XZ
SzToWzWithAlloc
?OpenFile@CmLogFile@@AAEJXZ
CmStrCpyAllocW
?SetFile@CIniA@@QAEXPBD@Z
?CIniW_GetEntryFromReg@CIniW@@IBEPAEPAUHKEY__@@PBG1KK@Z
ole32
WdtpInterfacePointer_UserSize
OleRegEnumVerbs
UtConvertDvtd16toDvtd32
OleCreateDefaultHandler
CoInitializeEx
CoLoadLibrary
OleLoadFromStream
CoFreeAllLibraries
CoSetProxyBlanket
CoFileTimeNow
OleSaveToStream
CoGetStdMarshalEx
CoAddRefServerProcess
SNB_UserMarshal
FreePropVariantArray
StringFromCLSID
msvcrt
__getmainargs
_mbsbtype
_gmtime64
_unlink
__set_app_type
_ismbbkpunct
_mbstrlen
_mbschr
atoi
abort
tmpfile
_mbsnbcat
sinh
exit
__p__commode
__p__fmode
_CIsin
___setlc_active_func
_ismbcl2
_except_handler2
dsprop
ADsPropGetInitInfo
ADsPropCheckIfWritable
ADsPropCreateNotifyObj
ADsPropSetHwnd
DllCanUnloadNow
DllGetClassObject
shell32
SHGetMalloc
user32
EndDialog
MessageBoxA
Sections
.text Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ