Static task
static1
Behavioral task
behavioral1
Sample
8adf0c8bf6e9a385dbd0567ac1d22751c230868f09d384060b73715f8a9153e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8adf0c8bf6e9a385dbd0567ac1d22751c230868f09d384060b73715f8a9153e3.exe
Resource
win10v2004-20221111-en
General
-
Target
8adf0c8bf6e9a385dbd0567ac1d22751c230868f09d384060b73715f8a9153e3
-
Size
83KB
-
MD5
f75c91f9b06774a3bb1592d881e77703
-
SHA1
32d32be55fa4e323f1a9c5dd1ad14df33982127c
-
SHA256
8adf0c8bf6e9a385dbd0567ac1d22751c230868f09d384060b73715f8a9153e3
-
SHA512
88d9c725de63479b4078edf96370bf81bd446ce94f1748a8eb557eca98a79aa2c56e6bcf64f23ffe5d7c13eb005a3d8febe05066eb3a1601768fc509bf817f4b
-
SSDEEP
1536:a1XGLeuwEDcXFNkUyFvoFRBuNuiX3vTJVfjiJG7kspYAONujyKdk1TexeMook0Lk:a+etEDUnkUyFv8RkIiHvPDQspYAOseEg
Malware Config
Signatures
Files
-
8adf0c8bf6e9a385dbd0567ac1d22751c230868f09d384060b73715f8a9153e3.exe windows x86
f1336ad4a4d48140ff13164d406db293
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
UnhookWindowsHookEx
GetSysColorBrush
SetWindowTextA
PostQuitMessage
GetMessageA
EnumWindows
GetScrollPos
FrameRect
GetSysColor
SetWindowPos
EqualRect
EnableMenuItem
GetSubMenu
kernel32
InterlockedExchange
GetStartupInfoA
GetThreadLocale
QueryPerformanceCounter
GetSystemTime
ExitProcess
GetFileAttributesA
GetCurrentProcessId
GetTempPathA
VirtualAllocEx
SetUnhandledExceptionFilter
GetTimeZoneInformation
RtlUnwind
GetOEMCP
FileTimeToSystemTime
gdi32
CopyEnhMetaFileA
CreateICW
FillRgn
DPtoLP
GetMapMode
SetViewportExtEx
CreateCompatibleBitmap
ExcludeClipRect
SelectClipPath
ole32
CoInitializeSecurity
OleRun
CoRevokeClassObject
CoCreateInstance
StgOpenStorage
CoTaskMemRealloc
CoInitialize
DoDragDrop
StringFromGUID2
advapi32
AdjustTokenPrivileges
GetSecurityDescriptorDacl
CheckTokenMembership
QueryServiceStatus
CryptHashData
RegCreateKeyA
RegQueryValueExW
RegCreateKeyExW
FreeSid
GetUserNameA
msvcrt
fprintf
iswspace
puts
__initenv
fflush
_mbscmp
_CIpow
strcspn
__setusermatherr
strlen
_strdup
_lock
__getmainargs
signal
_fdopen
strncpy
raise
_flsbuf
comctl32
CreatePropertySheetPageA
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_Write
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_SetIconSize
ImageList_DragEnter
ImageList_GetIconSize
InitCommonControls
ImageList_GetBkColor
shell32
DragAcceptFiles
ShellExecuteEx
ExtractIconExW
DragQueryFileA
SHBrowseForFolderA
ShellExecuteW
CommandLineToArgvW
DragQueryFileW
DoEnvironmentSubstW
ExtractIconW
SHGetPathFromIDList
oleaut32
SafeArrayRedim
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayCreate
SafeArrayPutElement
SafeArrayUnaccessData
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ