Static task
static1
Behavioral task
behavioral1
Sample
8e0a8670668ac242645ec14e0ad141e5ff955148f207929014080c25dc0fc22b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e0a8670668ac242645ec14e0ad141e5ff955148f207929014080c25dc0fc22b.exe
Resource
win10v2004-20220901-en
General
-
Target
8e0a8670668ac242645ec14e0ad141e5ff955148f207929014080c25dc0fc22b
-
Size
80KB
-
MD5
ffb133bf177809a859e726ed4202e4be
-
SHA1
c75b454d356528f12f794553b2ab6eeb99c81989
-
SHA256
8e0a8670668ac242645ec14e0ad141e5ff955148f207929014080c25dc0fc22b
-
SHA512
6e090fcf295ee1d5976ddfca66571678a2bf90758770e9df59b1b3badd149e0dad511ecc0100f7ea83fc7e50c45f7c6553b3b0f86697506dd8ee05493967e646
-
SSDEEP
1536:NB0EMseQsOD5+opEm0yvolCumGcdlp6ywp0QQPIu06WwUg8eG:NSs9sI5+8xJAZTQBxUg2
Malware Config
Signatures
Files
-
8e0a8670668ac242645ec14e0ad141e5ff955148f207929014080c25dc0fc22b.exe windows x86
2d3605b59f68e7abcacfae6f2702651f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowPos
GetSubMenu
EnableMenuItem
PostQuitMessage
SetWindowTextA
GetSysColorBrush
GetMessageA
GetScrollPos
FrameRect
EqualRect
EnumWindows
UnhookWindowsHookEx
GetSysColor
kernel32
InterlockedExchange
GetSystemTime
GetStartupInfoA
GetOEMCP
FileTimeToSystemTime
SetUnhandledExceptionFilter
RtlUnwind
GetThreadLocale
ExitProcess
GetCurrentProcessId
GetACP
GetTimeZoneInformation
GetTempPathA
GetFileAttributesA
VirtualAllocEx
QueryPerformanceCounter
gdi32
CreateICW
FillRgn
ExcludeClipRect
GetMapMode
DPtoLP
SetViewportExtEx
SelectClipPath
CreateCompatibleBitmap
CopyEnhMetaFileA
ole32
CoInitialize
StringFromGUID2
OleRun
CoRevokeClassObject
StgOpenStorage
CoTaskMemRealloc
CoInitializeSecurity
CoCreateInstance
DoDragDrop
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
FreeSid
RegQueryValueExW
GetUserNameA
RegCreateKeyA
QueryServiceStatus
GetSecurityDescriptorDacl
CheckTokenMembership
CryptHashData
msvcrt
strncpy
__initenv
__getmainargs
raise
fprintf
strlen
strcspn
fflush
iswspace
puts
_flsbuf
signal
_fdopen
_lock
__setusermatherr
_mbscmp
_strdup
_CIpow
comctl32
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_Write
ImageList_SetIconSize
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_LoadImageA
ImageList_GetBkColor
ImageList_DrawEx
InitCommonControls
shell32
CommandLineToArgvW
ShellExecuteEx
DragQueryFileW
DoEnvironmentSubstW
DragAcceptFiles
ExtractIconW
SHBrowseForFolderA
ExtractIconExW
ShellExecuteW
SHGetPathFromIDList
DragQueryFileA
oleaut32
SafeArrayRedim
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayCreate
SafeArrayPutElement
VariantCopy
SafeArrayPtrOfIndex
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE