Static task
static1
Behavioral task
behavioral1
Sample
8a5dc60f3a2c7ea927db48c4006650d9572ac6258ba41c2d0bfae2f3e3dde4b3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8a5dc60f3a2c7ea927db48c4006650d9572ac6258ba41c2d0bfae2f3e3dde4b3.exe
Resource
win10v2004-20220812-en
General
-
Target
8a5dc60f3a2c7ea927db48c4006650d9572ac6258ba41c2d0bfae2f3e3dde4b3
-
Size
16KB
-
MD5
808533422766b4a6270bdd6eb608d6f0
-
SHA1
0856cdfe18db5d4c32c04bda3c20b46255c8e03e
-
SHA256
8a5dc60f3a2c7ea927db48c4006650d9572ac6258ba41c2d0bfae2f3e3dde4b3
-
SHA512
9389b6468bf1eb2bf653b30aad365912dad92aa80eb016824d238b6c892c526ceceafee46ee073fe955c434513f293b85f98942f6f712c70524881e91574562c
-
SSDEEP
192:DNAWMjhFL/HPOsGEUoynYrmW2jX8piTR:DGPjrOsGhGrmWCX/
Malware Config
Signatures
Files
-
8a5dc60f3a2c7ea927db48c4006650d9572ac6258ba41c2d0bfae2f3e3dde4b3.exe windows x86
344c869a41c5ec63aa3b1fc636d7debc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord540
ord823
ord825
ord800
ord1158
ord858
ord860
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_stat
exit
__CxxFrameHandler
_exit
_XcptFilter
_acmdln
__getmainargs
_stricmp
kernel32
CloseHandle
GetCurrentProcessId
ResumeThread
CreateProcessA
GetCurrentThread
TerminateProcess
OpenProcess
SetThreadPriority
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
GetCurrentProcess
lstrlenA
GetModuleFileNameA
WriteFile
SetFilePointer
GetLocalTime
CreateFileA
DeleteFileA
lstrcatA
GetTempPathA
GlobalUnlock
GlobalLock
SetPriorityClass
user32
DefWindowProcA
SetClipboardViewer
ChangeClipboardChain
PostQuitMessage
GetWindowTextA
GetWindowTextLengthA
GetForegroundWindow
GetClipboardData
CloseClipboard
RegisterClassA
CreateWindowExA
wsprintfA
GetMessageA
TranslateMessage
GetKeyState
OpenClipboard
DispatchMessageA
SendMessageA
advapi32
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE