Static task
static1
Behavioral task
behavioral1
Sample
8a6367344bc8d66b90d9d3d3a3085a22d7d52e256ca98b0725658c917a90d6e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a6367344bc8d66b90d9d3d3a3085a22d7d52e256ca98b0725658c917a90d6e6.exe
Resource
win10v2004-20220812-en
General
-
Target
8a6367344bc8d66b90d9d3d3a3085a22d7d52e256ca98b0725658c917a90d6e6
-
Size
17.2MB
-
MD5
ee7f9e3bc63f28778df2770bbe2322e2
-
SHA1
fc3ac35e02bfac4511347814dfd8ae583ff43855
-
SHA256
8a6367344bc8d66b90d9d3d3a3085a22d7d52e256ca98b0725658c917a90d6e6
-
SHA512
ec3530a02f445cf4e8f8dd24fc54eafa23c621bc3a9e28ceda0a9f08b06989cea307d93d036faac0a4d418149b7871a9f2a6ac8945b9c39dca6121716e49b5e0
-
SSDEEP
393216:4F8/UfBdYDPxI5wcFGy/pkODpe15R4vBf0bIYngeg6d33TUN:MkU3wc0I6ua4FYIYngi3TU
Malware Config
Signatures
Files
-
8a6367344bc8d66b90d9d3d3a3085a22d7d52e256ca98b0725658c917a90d6e6.exe windows x86
904963a4d0fe0774de3d7f7c5209e328
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetStartupInfoA
GetModuleFileNameW
OutputDebugStringA
CompareStringW
DeleteFileW
GetProcessHeap
MultiByteToWideChar
SetHandleCount
HeapReAlloc
lstrlenA
LCMapStringW
WideCharToMultiByte
GetFileSize
GetModuleHandleA
ReadFile
SystemTimeToFileTime
GetOEMCP
GetCurrentThreadId
FlushFileBuffers
lstrcpyA
LCMapStringA
GetCurrentProcessId
CloseHandle
FormatMessageW
user32
SendDlgItemMessageW
GetWindow
GetWindowRect
GetDC
SetWindowLongA
LoadCursorW
wsprintfA
DrawFocusRect
DialogBoxParamW
CheckMenuItem
LoadBitmapW
gdi32
StartPage
CreateDCA
GetPaletteEntries
EndDoc
Ellipse
DeleteDC
SelectPalette
SelectClipRgn
StartDocW
advapi32
CryptGetKeyParam
OpenThreadToken
GetSecurityDescriptorDacl
AddAccessAllowedAce
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 427KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ