Static task
static1
Behavioral task
behavioral1
Sample
8163c6c86f00647db19a0975a3f81a5fba4851adb3da5679dd67ded8cc1fb410.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8163c6c86f00647db19a0975a3f81a5fba4851adb3da5679dd67ded8cc1fb410.exe
Resource
win10v2004-20221111-en
General
-
Target
8163c6c86f00647db19a0975a3f81a5fba4851adb3da5679dd67ded8cc1fb410
-
Size
80KB
-
MD5
8328efbc5e9a737c078e12b264b14139
-
SHA1
d025cf36cdd8915d5c18f59bbf0df2c9a007c860
-
SHA256
8163c6c86f00647db19a0975a3f81a5fba4851adb3da5679dd67ded8cc1fb410
-
SHA512
2f1313dddf04c3f5052df18a465e9a5a1f888c956c23ec1afd766ffb4edb443b24ff9313ba48b04a369e31bef66d8e79b0eef8e241011354d590b342fa9a99f7
-
SSDEEP
1536:Nl3+tls/g8lh1TfXsnaUDTmASsvqqDVul+13HyP:Nl3+f6g8L1TfXsa/ovrDMUS
Malware Config
Signatures
Files
-
8163c6c86f00647db19a0975a3f81a5fba4851adb3da5679dd67ded8cc1fb410.exe windows x86
6de3ced721f7d91bf245e48c4d0aa226
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
DeleteFileW
GetACP
GetLocaleInfoW
lstrlenW
LocalUnlock
LocalLock
Sleep
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetLastError
FindFirstFileW
GetDateFormatW
GlobalMemoryStatusEx
GlobalMemoryStatus
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalGetAtomNameA
GlobalFlags
GlobalFix
GlobalFindAtomW
GlobalFindAtomA
GlobalDeleteAtom
GlobalCompact
GlobalAlloc
GlobalAddAtomW
GlobalAddAtomA
GetWriteWatch
GetProcAddress
LoadLibraryA
GetCommandLineW
GlobalFree
SetErrorMode
CreateFileW
CallNamedPipeA
CompareStringA
CompareStringW
GetLocalTime
GetUserDefaultUILanguage
HeapFree
HeapAlloc
FindClose
GetProcessHeap
user32
CreateCursor
CreateCaret
CreateAcceleratorTableW
CreateAcceleratorTableA
CountClipboardFormats
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableW
CopyAcceleratorTableA
CloseWindowStation
CloseWindow
CloseDesktop
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
CheckRadioButton
CheckMenuRadioItem
CreateDesktopA
CreateDesktopW
CreateDialogIndirectParamA
SetScrollPos
GetWindowTextLengthW
GetWindowLongW
PeekMessageW
EnableWindow
MessageBoxW
WinHelpW
GetDlgCtrlID
ChildWindowFromPoint
GetDC
gdi32
TextOutW
CreateDCW
EndDoc
AbortDoc
SelectObject
DeleteDC
GetTextExtentPoint32W
EnumFontsW
GetTextFaceW
advapi32
RegOpenKeyA
RegCloseKey
ole32
OleRegEnumVerbs
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.too6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 926B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ