Static task
static1
Behavioral task
behavioral1
Sample
8097e9b77a380d03253194de8a6aae306a28fd846474e870a29ac4808f03279d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8097e9b77a380d03253194de8a6aae306a28fd846474e870a29ac4808f03279d.exe
Resource
win10v2004-20220812-en
General
-
Target
8097e9b77a380d03253194de8a6aae306a28fd846474e870a29ac4808f03279d
-
Size
66KB
-
MD5
64eeb93b39467a460869ee3f5b72fd97
-
SHA1
022699c24a2057ef5da59fc4f00628b24643c805
-
SHA256
8097e9b77a380d03253194de8a6aae306a28fd846474e870a29ac4808f03279d
-
SHA512
18ba0c41cb57bbf1c6849b63a86d7839bed301da6a63de5c91f85a460703a9d73d930ba9a4b40d882cc6845e4dd85aacbc515a612816e8b9eed621e1e13840ec
-
SSDEEP
1536:I8WiOyFf3BU/3FvYdFNgX3E42ttG25n0EgQMBUbJM:I8WK3BU/VAdFNgXU/u250EgQM+J
Malware Config
Signatures
Files
-
8097e9b77a380d03253194de8a6aae306a28fd846474e870a29ac4808f03279d.exe windows x86
6a9c17e17e8de0a299766718d6776906
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetSystemTimeAdjustment
SetFirmwareEnvironmentVariableA
ntdll
RtlSubAuthoritySid
RtlExtendedMagicDivide
RtlFindSetBitsAndClear
user32
GetSysColorBrush
PrintWindow
ReleaseDC
SetWindowTextW
LoadBitmapW
PaintDesktop
ole32
CoGetSystemSecurityPermissions
CoInstall
advapi32
ReadEventLogA
SetSecurityDescriptorOwner
RegDeleteKeyA
RegDeleteValueW
gdi32
CreateRectRgn
EqualRgn
ExtSelectClipRgn
BeginPath
SetTextColor
SetROP2
SetPixel
InvertRgn
IntersectClipRect
GetTextCharacterExtra
GetMetaRgn
GetDeviceCaps
GetDCBrushColor
GetBitmapBits
FrameRgn
CreateDiscardableBitmap
CreateDIBPatternBrushPt
CloseFigure
AddFontResourceW
FillRgn
dinput
DirectInputCreateEx
crypt32
PFXExportCertStoreEx
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE