Static task
static1
Behavioral task
behavioral1
Sample
b8e0c996a4a01c044e27d004aaa350f8b4dcbd46679fbf24878dafc97dc9c484.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8e0c996a4a01c044e27d004aaa350f8b4dcbd46679fbf24878dafc97dc9c484.exe
Resource
win10v2004-20220812-en
General
-
Target
b8e0c996a4a01c044e27d004aaa350f8b4dcbd46679fbf24878dafc97dc9c484
-
Size
93KB
-
MD5
87a0aed1f35d6030bfe1655a951485ef
-
SHA1
835b29af3540e07601345871f850a33601c5e750
-
SHA256
b8e0c996a4a01c044e27d004aaa350f8b4dcbd46679fbf24878dafc97dc9c484
-
SHA512
dd3d35dbe4ada4287819534115e6c1bbb888581153e6cf5015f822c05f9fb845025780533e31336f7799784f89a7e160640a1983a7ac2c2fade2cfc889fff12b
-
SSDEEP
1536:y2nksHQkJfc/zhTp1Q2Z9aYREWyWU2Hd6t+w5Y8Hgly2OnYarei2el:y2ntQkFcRLQ2Z9aoKWv6QEHmy2mYarb7
Malware Config
Signatures
Files
-
b8e0c996a4a01c044e27d004aaa350f8b4dcbd46679fbf24878dafc97dc9c484.exe windows x86
914588073ebfd50ea527b3a292185991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
ImageList_AddIcon
ImageList_Destroy
ImageList_Draw
ImageList_DragEnter
ImageList_GetIconSize
ImageList_DragMove
ImageList_Read
ImageList_ReplaceIcon
ImageList_Copy
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_Merge
ImageList_DrawEx
ImageList_LoadImage
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_Replace
ImageList_LoadImageA
ImageList_DrawIndirect
advapi32
RegReplaceKeyW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyA
RegEnumValueW
RegQueryValueExA
RegFlushKey
RegQueryInfoKeyA
RegEnumValueA
RegQueryInfoKeyW
RegLoadKeyW
RegEnumKeyW
RegOpenKeyW
RegOpenKeyExA
RegGetKeySecurity
RegCreateKeyExW
RegDeleteKeyA
RegLoadKeyA
RegCreateKeyExA
kernel32
SetLastError
lstrcpyA
GetFileType
lstrlenA
GetFileSize
GlobalAlloc
HeapFree
GetFileAttributesA
GlobalFree
lstrcpynA
GetCommandLineA
GetLastError
GetLocalTime
GetStringTypeW
CloseHandle
DeleteFileA
GetModuleFileNameA
FreeLibrary
GetCPInfo
user32
LoadMenuA
BlockInput
CloseWindow
CopyImage
CopyRect
AppendMenuA
EndDialog
AlignRects
DrawIcon
GetWindowTextA
CopyIcon
GetMenu
AppendMenuW
CalcMenuBar
IsMenu
GetCursor
GetWindowTextLengthA
GetDC
CopyRect
IsMenu
DrawTextA
AppendMenuA
BlockInput
GetWindowTextA
EndDialog
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthA
CopyImage
InsertMenuA
CopyIcon
GetFocus
CloseWindow
GetDlgItem
Sections
.UehBB Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RRaFAm Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tfkEv Size: 5KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WpZhk Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qqha Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ