Static task
static1
Behavioral task
behavioral1
Sample
8338aee6bf8e0c581091f6908ce7753832e1fb6ccf3b9896b63a7e15f75f63fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8338aee6bf8e0c581091f6908ce7753832e1fb6ccf3b9896b63a7e15f75f63fd.exe
Resource
win10v2004-20220901-en
General
-
Target
8338aee6bf8e0c581091f6908ce7753832e1fb6ccf3b9896b63a7e15f75f63fd
-
Size
155KB
-
MD5
798f7dbc81a1802447edaccee2a7446e
-
SHA1
adc866b2fd4b3455f94c76ef848ebef00eec4c9e
-
SHA256
8338aee6bf8e0c581091f6908ce7753832e1fb6ccf3b9896b63a7e15f75f63fd
-
SHA512
41cc7bdf5f1f4b987983892dabce2a2c2bd941865e9391dad120b768fbfcc8d937429e4684ba4f67f71a6dcc7c253b0481ffc3730c235172d549ccc591f6c70f
-
SSDEEP
3072:IKsBn+NycU1mr2srCUZ7aDDSI+6DLryq3MAIl+BmaEIVAl1jvOFxgdAdCl:gQNyZk95Z2npf3M505BVojGXnk
Malware Config
Signatures
Files
-
8338aee6bf8e0c581091f6908ce7753832e1fb6ccf3b9896b63a7e15f75f63fd.exe windows x86
8cda729a17308ffadff4d4876506c2be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
LocalFree
lstrcpynW
FormatMessageW
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
lstrcpyW
GlobalFree
SetLastError
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
CloseHandle
GetVersion
lstrcmpW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
user32
wvsprintfA
PostThreadMessageA
RegisterWindowMessageA
GetQueueStatus
DispatchMessageA
GetDesktopWindow
MsgWaitForMultipleObjects
ReleaseDC
GetDC
wsprintfA
CreateDialogParamA
PeekMessageA
DestroyWindow
ShowWindow
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ws2_32
WSARecv
oleaut32
VariantClear
SafeArraySetRecordInfo
VarCyFromDec
SetErrorInfo
SysFreeString
GetErrorInfo
Sections
.text Size: 58KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ