Static task
static1
Behavioral task
behavioral1
Sample
8577f6132a3889c7aa70f9c0c777ff3932fe5a7dc69d24a46eb42666ea561bb5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8577f6132a3889c7aa70f9c0c777ff3932fe5a7dc69d24a46eb42666ea561bb5.exe
Resource
win10v2004-20220812-en
General
-
Target
8577f6132a3889c7aa70f9c0c777ff3932fe5a7dc69d24a46eb42666ea561bb5
-
Size
151KB
-
MD5
2f9076c259b0e9c5d96a378db37bbb90
-
SHA1
0f337bd177ba804c4910f76539381d956d5de783
-
SHA256
8577f6132a3889c7aa70f9c0c777ff3932fe5a7dc69d24a46eb42666ea561bb5
-
SHA512
95e6ddab959b3030d4b4d78a070046cdbe56eaac4cb1908ce48c106b394ad77ffbb502742ff17650551ad476a76263f549798810c5c9316e4a01582a26e7862d
-
SSDEEP
3072:lavnvYCKd/tgTA2wHw5BxoKYi+pgDkJU0FiRUlmVKK:qnvRKRtsA2dyV6AiRUkI
Malware Config
Signatures
Files
-
8577f6132a3889c7aa70f9c0c777ff3932fe5a7dc69d24a46eb42666ea561bb5.exe windows x86
bb117b43895fabb3804a610370a92781
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
MoveToEx
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
VirtualAlloc
RtlMoveMemory
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DialogBoxIndirectParamA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
DialogBoxParamA
GetSystemMetrics
GetWindow
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rloc Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE