Static task
static1
Behavioral task
behavioral1
Sample
8f04bc2cfc119ddb79f605d6e1f5cc139207771479f5484636bc5f70dc1cd596.exe
Resource
win7-20221111-en
General
-
Target
8f04bc2cfc119ddb79f605d6e1f5cc139207771479f5484636bc5f70dc1cd596
-
Size
178KB
-
MD5
eb0aa54c4b940230739a8dde5347f6b9
-
SHA1
a9a80e645b21557c3d1562f5db97824fa3c8db10
-
SHA256
8f04bc2cfc119ddb79f605d6e1f5cc139207771479f5484636bc5f70dc1cd596
-
SHA512
34df41d25f1f145eeb009984477d54de5e560c064d9b0e30b20e832785943a90a3426ab501d31396f15bb88b6086aeae38926dac115e31d13fea0cdff77000c2
-
SSDEEP
3072:10UEAIJTL+Ev7oANFIVaejtWc1R/AK5ey28Paf0d+zXiuRxLjgkL:d0JfBen1Rt5NvafMuJrce
Malware Config
Signatures
Files
-
8f04bc2cfc119ddb79f605d6e1f5cc139207771479f5484636bc5f70dc1cd596.exe windows x86
9bbe5f07ddcf6da5e0d76a1da5566048
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
FreeEnvironmentStringsW
SetStdHandle
SetFilePointer
IsBadReadPtr
lstrcatA
GetFileAttributesA
lstrcmpiA
GetThreadLocale
GetOEMCP
GetStartupInfoA
GetStringTypeW
WriteFile
FindFirstFileA
IsBadCodePtr
MultiByteToWideChar
GetCPInfo
FlushFileBuffers
LCMapStringW
GetTickCount
InitializeCriticalSection
FreeEnvironmentStringsA
UnhandledExceptionFilter
EnumResourceNamesW
lstrcpyA
GetDiskFreeSpaceA
SetUnhandledExceptionFilter
GetProcAddress
CreateFileA
FreeLibrary
Sleep
GetFullPathNameA
lstrcpynA
LeaveCriticalSection
VirtualProtect
GetModuleHandleA
CloseHandle
lstrlenA
WideCharToMultiByte
EnterCriticalSection
GetLastError
lstrcmpA
LCMapStringA
GetStringTypeA
GetCurrentThreadId
LoadLibraryA
MulDiv
GetEnvironmentStrings
GetEnvironmentStringsW
ReadFile
lstrlenA
DeleteCriticalSection
RaiseException
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 91KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ