Static task
static1
Behavioral task
behavioral1
Sample
8be7c6a776de75522946a21ff496e0e4af041a1ccfeba9e8befe14a2bc51a087.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8be7c6a776de75522946a21ff496e0e4af041a1ccfeba9e8befe14a2bc51a087.exe
Resource
win10v2004-20220812-en
General
-
Target
8be7c6a776de75522946a21ff496e0e4af041a1ccfeba9e8befe14a2bc51a087
-
Size
232KB
-
MD5
9c557b2c77413af74f108557a91f7b76
-
SHA1
afcfe5500861fbcd723cd12f4d2c49d77efc661c
-
SHA256
8be7c6a776de75522946a21ff496e0e4af041a1ccfeba9e8befe14a2bc51a087
-
SHA512
6c9027867469d84d54cd0a2d12c667b705432d5e41599125747ab7b33855849496f59717cd3ff3491349fd7961832a086ffe4188a17b887b2332f53541f4ed28
-
SSDEEP
6144:QbR/HfW9LGrwd/bi2DVAd5KixcmeScwVojip:w9sd/biKIoQ
Malware Config
Signatures
Files
-
8be7c6a776de75522946a21ff496e0e4af041a1ccfeba9e8befe14a2bc51a087.exe windows x86
2c20524cbeee69a9ca4457e60e39bd32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetBinaryTypeA
FindClose
GetModuleHandleA
GetTempPathW
CreateFileW
GetTempPathA
CloseHandle
GetBinaryTypeW
GetModuleHandleW
LoadLibraryA
CreateFileA
GetFileType
GetStartupInfoA
user32
DrawTextW
GetWindowTextA
DestroyWindow
IsWindowVisible
ShowWindow
DeleteMenu
CloseWindow
BeginPaint
DrawTextA
CloseClipboard
GetWindow
GetWindowTextW
EnableWindow
DefWindowProcA
GetWindowRect
EmptyClipboard
ReleaseDC
GetDC
DefWindowProcW
CreateWindowExA
IsWindowEnabled
gdi32
FrameRgn
CreateRectRgn
CreateRoundRectRgn
GetStockObject
BitBlt
CreateFontIndirectA
FillRgn
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectW
CreatePolygonRgn
CreateSolidBrush
DeleteObject
CombineRgn
CreateCompatibleDC
oleaut32
SafeArrayCreate
CreateErrorInfo
SetErrorInfo
SysAllocString
GetErrorInfo
SafeArrayCopy
SysAllocStringLen
SysAllocStringByteLen
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ