Static task
static1
Behavioral task
behavioral1
Sample
836d8eccdb3e1d8ddd96c4ff9ef1931ddf87400b81a4bc34dd9c20cb62f3fe0c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
836d8eccdb3e1d8ddd96c4ff9ef1931ddf87400b81a4bc34dd9c20cb62f3fe0c.exe
Resource
win10v2004-20220812-en
General
-
Target
836d8eccdb3e1d8ddd96c4ff9ef1931ddf87400b81a4bc34dd9c20cb62f3fe0c
-
Size
723KB
-
MD5
c538bb7734776540016c4b5923633cd7
-
SHA1
24a0c15c8d820563ecdb37ac293d622243c5cf1a
-
SHA256
836d8eccdb3e1d8ddd96c4ff9ef1931ddf87400b81a4bc34dd9c20cb62f3fe0c
-
SHA512
b5944ceb6bbbee04b8169c6b2bc00381b84371b0083c95a0ba111316052d66a76306f1585fc274f2528f13e127a881fee7bf8a2d44dc26dfdfdb0122a3262518
-
SSDEEP
12288:PRHyGCWpebZmc/qcFqqWE1YPARL8p2YYqKRx+JMYOVsYsos+Z4F8S0iE7Da30cGu:PRSnWcmRE06LY2YYNmJMXV/Ns+el0/EZ
Malware Config
Signatures
Files
-
836d8eccdb3e1d8ddd96c4ff9ef1931ddf87400b81a4bc34dd9c20cb62f3fe0c.exe windows x86
0f8e06ed2327bfbffebe34ef3e32351c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetTickCount
GetCommandLineA
GetLastError
GetVersion
GetCurrentThreadId
GetModuleHandleA
ExitProcess
GetCurrentThread
VirtualAlloc
GetOEMCP
FindResourceA
VirtualFree
UnmapViewOfFile
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
HeapSize
WideCharToMultiByte
LockResource
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
HeapCreate
InterlockedIncrement
CreateFileA
CreateEventA
Sleep
GlobalLock
FindFirstFileW
CompareStringA
FindFirstFileA
lstrcmpA
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileA
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
SetEvent
LoadLibraryW
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
MultiByteToWideChar
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
WriteFile
GetStringTypeA
GetCPInfo
SetStdHandle
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
ReleaseMutex
user32
GetFocus
GetClientRect
SystemParametersInfoA
GetKeyState
DialogBoxParamA
MessageBoxA
EndDialog
LoadIconA
GetDlgItem
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
DispatchMessageA
CreateWindowExA
EnableMenuItem
LoadStringA
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
UpdateWindow
DestroyWindow
GetCursorPos
GetDC
IsWindow
SetWindowPos
PostQuitMessage
Sections
.text Size: 675KB - Virtual size: 1001KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ