Static task
static1
Behavioral task
behavioral1
Sample
8b99b3b8cc865211ad94efac6ef40148961b09edcf38904b56925f866b6a14be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8b99b3b8cc865211ad94efac6ef40148961b09edcf38904b56925f866b6a14be.exe
Resource
win10v2004-20221111-en
General
-
Target
8b99b3b8cc865211ad94efac6ef40148961b09edcf38904b56925f866b6a14be
-
Size
288KB
-
MD5
6253aad889b295f28cd700c680fa28fe
-
SHA1
a9ae8b793f0e4889a3787b94916be09fc0ece590
-
SHA256
8b99b3b8cc865211ad94efac6ef40148961b09edcf38904b56925f866b6a14be
-
SHA512
eb5993541526c0d33e0c4a351ba2e444b2202d2d8ff10faafae77642b2cb82c08a37bad563471cf2d0f50fe60d99873361119c168c2973e7ccdc527b61cb3649
-
SSDEEP
6144:fKbQRjpkPvJ/2/s0wMISD7zPbNLzlgSBeWOx7jir:fKiKJuwCD7zTtlfTn
Malware Config
Signatures
Files
-
8b99b3b8cc865211ad94efac6ef40148961b09edcf38904b56925f866b6a14be.exe windows x86
8d50ad777cd7cb534449f351edbe88a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
GetStringTypeW
UnhandledExceptionFilter
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapReAlloc
GetDiskFreeSpaceA
GetLastError
HeapCreate
GetVolumeInformationA
GlobalAlloc
GetDriveTypeA
GetTickCount
GetUserDefaultLCID
IsDebuggerPresent
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
IsProcessorFeaturePresent
user32
DestroyWindow
GetMessageA
RegisterClassExA
LoadStringA
LoadIconA
wsprintfA
TranslateMessage
MessageBoxA
UnregisterClassA
CreateWindowExA
TranslateAcceleratorA
GetDlgItem
DefWindowProcA
LoadAcceleratorsA
ShowWindow
DispatchMessageA
SetWindowTextA
UpdateWindow
LoadCursorA
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 254KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ