Static task
static1
Behavioral task
behavioral1
Sample
c8e428fcc1675cb2868505225def9704ac373e3e8c6cfab9db7d7e64d5951286.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c8e428fcc1675cb2868505225def9704ac373e3e8c6cfab9db7d7e64d5951286.exe
Resource
win10v2004-20220812-en
General
-
Target
c8e428fcc1675cb2868505225def9704ac373e3e8c6cfab9db7d7e64d5951286
-
Size
85KB
-
MD5
c9d8d49bc7cf91b0afbe26b59664594b
-
SHA1
2e48804a0fac9ca0cf2a4d3f81afa0501519e156
-
SHA256
c8e428fcc1675cb2868505225def9704ac373e3e8c6cfab9db7d7e64d5951286
-
SHA512
3092bce9bbc14163e376ba361463abe156d897a4a9b7cbd5be8b5e2784b3f1739bd21bffd10d65f3765a33620620c817db9b4154de5b62d1aec44aaacf2548f4
-
SSDEEP
1536:Wn9qAsWapz2sWW9X4toC/yHYmylChAIlWICv88aB3JaYV9TRMTtIiqCWwBoGoB8y:Wn5oFWGXigYplGRMfEBjVJeTtIi5xxk
Malware Config
Signatures
Files
-
c8e428fcc1675cb2868505225def9704ac373e3e8c6cfab9db7d7e64d5951286.exe windows x86
14f84ddc656d21cdb2d5efdfb681fb52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
SHFileOperationW
ShellExecuteExW
shlwapi
SHGetValueW
PathRemoveFileSpecW
PathAppendW
PathCombineW
PathFileExistsW
oleacc
LresultFromObject
CreateStdAccessibleObject
comctl32
PropertySheetW
user32
PostMessageW
SetWindowLongW
SetWindowTextW
GetFocus
ReleaseDC
GetDlgCtrlID
IsDlgButtonChecked
CreateCursor
PostQuitMessage
LoadIconW
IsWindow
GetDC
IsWindowEnabled
DestroyWindow
MsgWaitForMultipleObjects
kernel32
RegisterConsoleVDM
MoveFileW
GetProcessHandleCount
SearchPathW
EnumResourceNamesA
FreeEnvironmentStringsW
CompareFileTime
GetShortPathNameW
GetFullPathNameW
SetFileTime
ole32
CoInitializeEx
CoTaskMemAlloc
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ