Static task
static1
Behavioral task
behavioral1
Sample
8923bf813d7e303447137590b0e624c388a027f1bab56d311896e5a6684d3ff0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8923bf813d7e303447137590b0e624c388a027f1bab56d311896e5a6684d3ff0.exe
Resource
win10v2004-20220812-en
General
-
Target
8923bf813d7e303447137590b0e624c388a027f1bab56d311896e5a6684d3ff0
-
Size
320KB
-
MD5
565cff14311c5fed51ca9df9b4b91995
-
SHA1
e2b7c8395c9880cd050bbc8a7cd539737cb5efeb
-
SHA256
8923bf813d7e303447137590b0e624c388a027f1bab56d311896e5a6684d3ff0
-
SHA512
c9496edae5dccf3bdd306055e17f4c4a0fbfdaeb132c3509c9a29419019690a5cd7b234e423d6d9aacea30d782785a3dcd324ace0c271c2716168b87882a3488
-
SSDEEP
6144:2MrEWiGKO9gIFD7py1d/99GxqI7lWA/LtC6DaRNAk93gBdk4mW3:xrXMOic1sUxXxWKZLwSSgB2W3
Malware Config
Signatures
Files
-
8923bf813d7e303447137590b0e624c388a027f1bab56d311896e5a6684d3ff0.exe windows x86
dc8e2fa5f3d94e288bdb4842b6a2c9f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetEnvironmentStringsA
GetProcessVersion
GetStdHandle
GetTimeFormatA
IsDebuggerPresent
GetCurrentThread
GetACP
GetTapeStatus
GetProcessHeap
LoadLibraryExA
HeapCreate
HeapQueryInformation
GetModuleHandleA
GetLogicalDrives
GlobalMemoryStatus
WaitForSingleObject
VirtualProtect
CreateIoCompletionPort
GetCurrentProcessId
HeapDestroy
user32
GetCursorPos
DragDetect
GetWindowTextLengthA
DrawTextA
BeginPaint
ShowWindow
GetDlgItem
GetClassNameA
EndPaint
SetForegroundWindow
FrameRect
GetParent
GetTitleBarInfo
SetActiveWindow
wsprintfA
FillRect
GetWindow
GetFocus
ReleaseDC
advapi32
RegCreateKeyA
RegEnumKeyA
RegSetValueExA
RegFlushKey
RegCloseKey
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ