Static task
static1
Behavioral task
behavioral1
Sample
8c726ed8f089186d4a6d125b0808a36abc78e7057a1773a29e2edfbcb06b8614.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c726ed8f089186d4a6d125b0808a36abc78e7057a1773a29e2edfbcb06b8614.exe
Resource
win10v2004-20221111-en
General
-
Target
8c726ed8f089186d4a6d125b0808a36abc78e7057a1773a29e2edfbcb06b8614
-
Size
636KB
-
MD5
442bc2696f376960e1b92105d7b7f161
-
SHA1
b56de02642e01e0d6e7173a939c09dcf1f9f0cf5
-
SHA256
8c726ed8f089186d4a6d125b0808a36abc78e7057a1773a29e2edfbcb06b8614
-
SHA512
0d3fed825afa3382fadea85fcde7c05de1d821262e77e6fc0c611c5a50feb6d269b6f935dbbac97b7aeb101a381ef059d684e23329870d1a6c5ce4e57b989df9
-
SSDEEP
12288:ns2ovYrB+CV9Z0Hjj3s5uvzSzNWypdY8tMWN4/qe2GoyqJrQX5N:ns2ovYro+2HjA5urOVzb4/qdyTP
Malware Config
Signatures
Files
-
8c726ed8f089186d4a6d125b0808a36abc78e7057a1773a29e2edfbcb06b8614.exe windows x86
836f4315a012bdcf5b6c4ea7c18659fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetTimeFormatA
CreateIoCompletionPort
GetProcessVersion
VirtualProtect
GetLogicalDrives
GetTapeStatus
GetProcessHeap
GetACP
InterlockedExchange
GetModuleHandleA
IsDebuggerPresent
HeapDestroy
HeapCreate
GetStdHandle
WaitForSingleObject
GetCurrentProcessId
GetEnvironmentStringsA
HeapQueryInformation
LoadLibraryExA
GlobalMemoryStatus
user32
GetWindow
GetFocus
FillRect
ReleaseDC
GetTitleBarInfo
DrawTextA
SetActiveWindow
EndPaint
SetForegroundWindow
FrameRect
GetClassNameA
GetDlgItem
GetCursorPos
ShowWindow
wsprintfA
GetParent
DragDetect
GetWindowTextLengthA
BeginPaint
gdi32
GetClipBox
CreatePalette
CreateBitmap
GetLayout
CloseFigure
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ