Static task
static1
Behavioral task
behavioral1
Sample
8b5905541dd6d85bdca23072e48b2fbb2f4772ee9647fbeb9d774fec2b96183d.exe
Resource
win7-20220812-en
General
-
Target
8b5905541dd6d85bdca23072e48b2fbb2f4772ee9647fbeb9d774fec2b96183d
-
Size
223KB
-
MD5
9d0f97147645f41936a009df526e1a08
-
SHA1
73035158c863d5744a8a614202b26bbde6c5818e
-
SHA256
8b5905541dd6d85bdca23072e48b2fbb2f4772ee9647fbeb9d774fec2b96183d
-
SHA512
d8cca1ef2ed6a9b2b9a3c06ab9563eebe5b8e2763168ec2f032abc00d50e8b95ce324cedd5e092df8b248a004848110e26d2aad2054bf578971013a51d2c4b7f
-
SSDEEP
3072:w0aywemV8wu2IGZ/A9TAmisNeyyouElhmbloMenBG3NhBS0sJts:w0aywLiyqHxfyNIhmb0G3Npsg
Malware Config
Signatures
Files
-
8b5905541dd6d85bdca23072e48b2fbb2f4772ee9647fbeb9d774fec2b96183d.exe windows x86
f41040ae1b8aaab6ea6cb45abc4a6115
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExA
ShellExecuteA
shlwapi
PathCombineA
PathIsDirectoryA
StrToIntA
PathRemoveFileSpecA
StrChrA
PathAppendA
iphlpapi
GetAdaptersInfo
kernel32
WriteConsoleA
SetStdHandle
GetLocaleInfoW
Sleep
CreateMutexA
GetLastError
CloseHandle
CreateFileA
WriteFile
SetErrorMode
SetUnhandledExceptionFilter
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
WideCharToMultiByte
lstrlenA
GetVersionExA
LoadLibraryA
FreeLibrary
WaitForSingleObject
GetModuleFileNameA
DeleteFileA
lstrcpynA
CreateDirectoryA
GetVolumeInformationA
RemoveDirectoryA
CreateEventA
GetConsoleOutputCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
GetProcAddress
MultiByteToWideChar
InterlockedExchange
LocalAlloc
RaiseException
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
WriteConsoleW
FlushFileBuffers
GetFileType
QueryPerformanceCounter
GetTickCount
SetEvent
GetPrivateProfileStringA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetPrivateProfileIntA
WritePrivateProfileStringA
SetHandleCount
GetPrivateProfileSectionNamesA
ResetEvent
CreateThread
UnmapViewOfFile
GetFileSize
SetFilePointer
SetEndOfFile
MapViewOfFileEx
CreateFileMappingA
FindClose
FindNextFileA
FindFirstFileA
ReadFile
GetSystemTime
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetSystemTimeAsFileTime
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetStdHandle
ExitProcess
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualFree
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
user32
UnregisterClassA
advapi32
RegOpenKeyExA
RegCloseKey
RegFlushKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
shfolder
SHGetFolderPathA
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ