Static task
static1
Behavioral task
behavioral1
Sample
8cf451f8f3b2ec859ea57c43cbad4490de6ae5475203b67a2f4278a590b4d37d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8cf451f8f3b2ec859ea57c43cbad4490de6ae5475203b67a2f4278a590b4d37d.exe
Resource
win10v2004-20220901-en
General
-
Target
8cf451f8f3b2ec859ea57c43cbad4490de6ae5475203b67a2f4278a590b4d37d
-
Size
162KB
-
MD5
3555c7c0669a7816a71df0f1688d69b5
-
SHA1
29b10276224fc7a6f5e275300878503dee1acb49
-
SHA256
8cf451f8f3b2ec859ea57c43cbad4490de6ae5475203b67a2f4278a590b4d37d
-
SHA512
6cf2397a5878bfbf63d6b473b6e89a950d21646c37309393ffef0e66c6e51d419ca0a42feadb55446774e8489d5be0b4ad21c2bb0562417ff7e476d5de1e6695
-
SSDEEP
1536:bPRPsQBrRjMornA4K54v7aG6WgB65rQSZMFqgSYd8jvImD6s5Xez/joh0FarvXVn:tRBry2nq5Kmx3f98pxsLo5n/G9vur
Malware Config
Signatures
Files
-
8cf451f8f3b2ec859ea57c43cbad4490de6ae5475203b67a2f4278a590b4d37d.exe windows x86
dbdb91dc6e719c0ca02748f467f71bb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynW
SystemTimeToFileTime
VirtualAlloc
OpenProcess
PrivMoveFileIdentityW
WriteFile
VirtualFree
CreateFileMappingA
GetStdHandle
GetSystemTime
DuplicateHandle
CloseHandle
SetEvent
GetProcessId
ProcessIdToSessionId
GetModuleFileNameW
CreateEventA
AddAtomW
EnumResourceTypesA
CreateDirectoryW
GetUserDefaultUILanguage
GetFileAttributesW
WaitForSingleObject
GetProcAddress
ExitProcess
DeleteAtom
GetFileAttributesA
LoadLibraryExW
LoadLibraryW
CreateFileW
MoveFileW
OutputDebugStringW
UnmapViewOfFile
CreateMutexA
MapViewOfFile
LoadLibraryA
ReleaseMutex
FindAtomW
user32
MessageBoxW
LoadCursorW
GetUpdateRgn
CreateWindowExW
GetDC
GetWindowInfo
RegisterClassExW
EndDialog
oleacc
LresultFromObject
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.apexi Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ