Static task
static1
Behavioral task
behavioral1
Sample
f8ffd727086a0972904fa4ecfabdfb2fc8307af923d62ee7f3bc1e83f11aea90.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8ffd727086a0972904fa4ecfabdfb2fc8307af923d62ee7f3bc1e83f11aea90.exe
Resource
win10v2004-20220812-en
General
-
Target
f8ffd727086a0972904fa4ecfabdfb2fc8307af923d62ee7f3bc1e83f11aea90
-
Size
167KB
-
MD5
efe2a60123f4418efa78ca59184aef0c
-
SHA1
a8a45670f23b3549bfe6cc885f688777ae7db1f4
-
SHA256
f8ffd727086a0972904fa4ecfabdfb2fc8307af923d62ee7f3bc1e83f11aea90
-
SHA512
6f39a32939a8a21e39e671ad2df0d94b6d15795380dbfb7323fc15c3b09f1e6d4841264b0d7e9dae9fd6d03ac9bac7bc8a26bf78936b936ca257bb697a7c0392
-
SSDEEP
3072:1Asizpuom5W7tHK+XYD2Sz8AlddVjLwd7qmQActu3/5oxua:1pizsr8HjY1zNd9Li7qgrEua
Malware Config
Signatures
Files
-
f8ffd727086a0972904fa4ecfabdfb2fc8307af923d62ee7f3bc1e83f11aea90.exe windows x86
c6c2fd2afbfcc923a510f434289cfa9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetSystemDirectoryA
FindFirstFileA
GetOEMCP
GetACP
FindNextFileA
FindClose
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapSize
GetLastError
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetProcAddress
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
ReadFile
LoadLibraryA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
user32
MessageBoxA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE