Static task
static1
Behavioral task
behavioral1
Sample
8a658b17110cef7edaf6101cd720c37801595854353be2e68d210412c3b63aef.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8a658b17110cef7edaf6101cd720c37801595854353be2e68d210412c3b63aef.exe
Resource
win10v2004-20221111-en
General
-
Target
8a658b17110cef7edaf6101cd720c37801595854353be2e68d210412c3b63aef
-
Size
330KB
-
MD5
598a0e6d961a8f1530efa6c5ed6e35ef
-
SHA1
b7e0261449e267be6fbf6d121546e8363c3b6881
-
SHA256
8a658b17110cef7edaf6101cd720c37801595854353be2e68d210412c3b63aef
-
SHA512
715269a51e6e6b60d6594b7339149b5a99a5c85ea7364b893bb143ddbbbfde25fa0019275322f61b09a2b7a5b49c7bd62da492249c6de46a89daa622447782b9
-
SSDEEP
6144:CLHnviIkzIsHFd1ZN6a4p8EuOHcjEoeuNzlE5EjuMcd9YX+zl1JzV1LTGNCj1ZV:6HvEzI+b1aa4p7uPjEhu3EckdSQ1Jzvt
Malware Config
Signatures
Files
-
8a658b17110cef7edaf6101cd720c37801595854353be2e68d210412c3b63aef.exe windows x86
8b956614760b0ab8abdc5f08874ae2ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
AddAtomA
InterlockedExchange
lstrlenA
GetStdHandle
HeapCreate
GetConsoleCP
GetModuleHandleA
WaitForSingleObject
GetProfileIntA
GetSystemDefaultLangID
GetVersion
GetTickCount
CloseHandle
SuspendThread
GetCommandLineA
HeapReAlloc
CompareFileTime
WaitForMultipleObjects
LoadLibraryExA
VirtualProtect
user32
SubtractRect
CreateCaret
InsertMenuA
DrawCaption
DispatchMessageA
CopyRect
GetDlgItem
InvertRect
FindWindowA
SetWindowPos
GetKeyboardLayout
GetKeyState
CreateCursor
DestroyMenu
ModifyMenuA
MessageBoxA
CreateMenu
EnableScrollBar
CopyImage
EqualRect
SetPropA
GetMenuStringA
DialogBoxParamA
CreateIcon
IsDialogMessage
netapi32
DsGetDcNameA
DsGetDcNextA
DsRoleCancel
DsGetDcOpenA
DsRoleFreeMemory
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ