Static task
static1
Behavioral task
behavioral1
Sample
8317a66ec4d6f395f4d8fb83d770b6db46dc3d92cd5596fa3934b7826f2f4cbd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8317a66ec4d6f395f4d8fb83d770b6db46dc3d92cd5596fa3934b7826f2f4cbd.exe
Resource
win10v2004-20221111-en
General
-
Target
8317a66ec4d6f395f4d8fb83d770b6db46dc3d92cd5596fa3934b7826f2f4cbd
-
Size
97KB
-
MD5
d37ff6858e2a0ff67f4d54237bc7b12c
-
SHA1
22f51f821bdc091f616b708922406ad07f1926cb
-
SHA256
8317a66ec4d6f395f4d8fb83d770b6db46dc3d92cd5596fa3934b7826f2f4cbd
-
SHA512
55201892b691c33b863df4dc436eac85a7c321c9583f2d3af15f13a100754b0a9af39ab99de988efbda97d8bbdaba22cda4761b9bce57adecd096e4f1f59aed9
-
SSDEEP
3072:bOoYGVZJNIq9nsyV26BNCeO9GkWo9O6m:bOoTrNsy9iWo9OB
Malware Config
Signatures
Files
-
8317a66ec4d6f395f4d8fb83d770b6db46dc3d92cd5596fa3934b7826f2f4cbd.exe windows x86
a3627e4aa528a20a9a842047093e99a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_XcptFilter
_initterm
memset
_acmdln
getenv
free
_except_handler3
_adjust_fdiv
__p__fmode
__getmainargs
exit
printf
__set_app_type
strcmp
__setusermatherr
__p__commode
calloc
_exit
kernel32
LoadLibraryExW
SetFileTime
SetFileAttributesA
GetSystemDirectoryA
VirtualProtectEx
SetFileAttributesW
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
OpenProcess
DuplicateHandle
gdi32
GetTextColor
DeleteEnhMetaFile
SetWorldTransform
GetObjectA
UnrealizeObject
CreateSolidBrush
GetStockObject
SaveDC
SetBkColor
comctl32
ImageList_SetBkColor
CreatePropertySheetPageA
ImageList_SetDragCursorImage
InitCommonControlsEx
ImageList_Draw
ImageList_DragEnter
user32
CreateMenu
GetDlgItem
GetClassNameA
GetMenuState
SetScrollRange
GetKeyState
LoadBitmapA
TrackPopupMenu
ShowOwnedPopups
oleaut32
SysFreeString
VariantCopyInd
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayRedim
shell32
ExtractIconW
SHGetDesktopFolder
ExtractIconExA
advapi32
ControlService
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
CryptHashData
IsValidSid
SetSecurityDescriptorDacl
ole32
CoTaskMemFree
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ