Static task
static1
Behavioral task
behavioral1
Sample
8b8be44a885b5b8b8853ef2e2c21fd98aed83c7e368a6b6cb69b60c594275cee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b8be44a885b5b8b8853ef2e2c21fd98aed83c7e368a6b6cb69b60c594275cee.exe
Resource
win10v2004-20220812-en
General
-
Target
8b8be44a885b5b8b8853ef2e2c21fd98aed83c7e368a6b6cb69b60c594275cee
-
Size
87KB
-
MD5
f8bf2358abdf1ff501f95efe105d1634
-
SHA1
77771083122ba784b12e05a273c3ce0cc1414593
-
SHA256
8b8be44a885b5b8b8853ef2e2c21fd98aed83c7e368a6b6cb69b60c594275cee
-
SHA512
1b9036a810441137b3b36de69df37579160209b4616a4fe7e72ca9e25371fb9f8033ad13009993d57ef7e0320f86ecab0eb366b89fa71e756fc76b7d48c5dd55
-
SSDEEP
1536:h3aC36OMP4MMJhYJlCEhBswExeheUKnhq2LKXSwrRBWfPwtI8bezE:gC36OM0YRhBsTehlOc2uPWfPp8bB
Malware Config
Signatures
Files
-
8b8be44a885b5b8b8853ef2e2c21fd98aed83c7e368a6b6cb69b60c594275cee.exe windows x86
e3c9991ff2f9e0c687697e9c665ec0e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetSubMenu
EqualRect
UnhookWindowsHookEx
EnumWindows
SetWindowPos
GetSysColor
EnableMenuItem
GetScrollPos
GetSysColorBrush
PostQuitMessage
GetMessageA
SetWindowTextA
FrameRect
kernel32
GetStartupInfoA
GetFileAttributesA
GetOEMCP
GetTimeZoneInformation
GetACP
VirtualAllocEx
GetTickCount
FileTimeToSystemTime
GetThreadLocale
GetTempPathA
ExitProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
RtlUnwind
InterlockedExchange
gdi32
ExcludeClipRect
SelectClipPath
FillRgn
CreateICW
GetMapMode
SetViewportExtEx
DPtoLP
CreateCompatibleBitmap
CopyEnhMetaFileA
ole32
DoDragDrop
CoInitializeSecurity
CoTaskMemRealloc
StgOpenStorage
CoRevokeClassObject
CoInitialize
OleRun
StringFromGUID2
CoCreateInstance
advapi32
CryptHashData
GetUserNameA
RegCreateKeyExW
RegQueryValueExW
GetSecurityDescriptorDacl
RegCreateKeyA
QueryServiceStatus
AdjustTokenPrivileges
FreeSid
CheckTokenMembership
msvcrt
strcspn
_CIpow
signal
_lock
_strdup
iswspace
__setusermatherr
raise
fprintf
_mbscmp
__initenv
puts
strncpy
_flsbuf
__getmainargs
fflush
_fdopen
strlen
comctl32
ImageList_Write
ImageList_LoadImageW
ImageList_SetIconSize
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_GetBkColor
InitCommonControls
ImageList_Destroy
ImageList_DragEnter
ImageList_ReplaceIcon
shell32
DragQueryFileA
SHGetPathFromIDList
SHBrowseForFolderA
DragQueryFileW
DragAcceptFiles
ShellExecuteW
CommandLineToArgvW
ExtractIconW
DoEnvironmentSubstW
ShellExecuteEx
ExtractIconExW
oleaut32
SafeArrayPutElement
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetUBound
SafeArrayRedim
SafeArrayUnaccessData
SysReAllocStringLen
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE