Static task
static1
Behavioral task
behavioral1
Sample
8f143efc140da27650cd5ab3544f0f1fce9ad5aa2d57077b06b3e384542a5fbb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f143efc140da27650cd5ab3544f0f1fce9ad5aa2d57077b06b3e384542a5fbb.exe
Resource
win10v2004-20220812-en
General
-
Target
8f143efc140da27650cd5ab3544f0f1fce9ad5aa2d57077b06b3e384542a5fbb
-
Size
402KB
-
MD5
6b1b692844128b9e7614e4d4176a1e48
-
SHA1
161284c1d016a4030b67e9b4d9ddc23af9bee553
-
SHA256
8f143efc140da27650cd5ab3544f0f1fce9ad5aa2d57077b06b3e384542a5fbb
-
SHA512
c40bc899aeecc0cddaf1a8bb403faec984dd6bd8db4e1484ae8b173e7390dbed288418cd9f350716dc7bcc8cfecacc3b8c8befb2e569e0a343bf3badd531a9d5
-
SSDEEP
1536:z06vHVN/8n9Ij8dxo20kcFv+1yIuls1L1lhih6T:dvHVMWFmHVbT
Malware Config
Signatures
Files
-
8f143efc140da27650cd5ab3544f0f1fce9ad5aa2d57077b06b3e384542a5fbb.exe windows x86
547f12ce41d23a16d62d3fbd41f2fb2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
ExitProcess
FreeLibrary
GetConsoleOutputCP
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathW
IsDebuggerPresent
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree
user32
CharNextA
DrawTextA
FillRect
GetActiveWindow
GetClientRect
GetCursorPos
KillTimer
LoadStringA
MapWindowPoints
PtInRect
RegisterClassA
SetFocus
SetWindowPos
gdi32
CreateBitmap
Escape
ExcludeClipRect
GetSystemPaletteEntries
MaskBlt
PlayEnhMetaFile
Rectangle
SetBrushOrgEx
SetWinMetaFileBits
shell32
DragQueryFile
DragQueryFileW
ExtractIconA
ExtractIconW
FindExecutableW
SHCreateDirectoryExW
SHFileOperationW
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteExA
Shell_NotifyIconW
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vumrasg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE