Static task
static1
Behavioral task
behavioral1
Sample
8f0e7211c82b4a5a2847ddafe7815b4e86611cc096e1437cb6a1f8171a688f2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f0e7211c82b4a5a2847ddafe7815b4e86611cc096e1437cb6a1f8171a688f2a.exe
Resource
win10v2004-20221111-en
General
-
Target
8f0e7211c82b4a5a2847ddafe7815b4e86611cc096e1437cb6a1f8171a688f2a
-
Size
274KB
-
MD5
08c0a5d9d2f062e24ba4351f47780735
-
SHA1
69be47d88a7b945a49796a15a454e3eef6b1d5b6
-
SHA256
8f0e7211c82b4a5a2847ddafe7815b4e86611cc096e1437cb6a1f8171a688f2a
-
SHA512
be804e2ee97e300ebf868ab4a147b72209d9ec0118f8108852eb6fb2133f75805384a188abd4656e5a07e1bacd2c328a5fe38498d9ca98ad261f0cab2c4819d2
-
SSDEEP
6144:fTGCAj8CEsu9PMuUpv1gsDXXI1ZkghODq2nBf53YKXEla:fOAKupkfBXXIy9Dq2LX0l
Malware Config
Signatures
Files
-
8f0e7211c82b4a5a2847ddafe7815b4e86611cc096e1437cb6a1f8171a688f2a.exe windows x86
a79ff3157b097b33e1ad5e6d53bafc04
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
LCMapStringW
FreeEnvironmentStringsA
GetCPInfo
lstrcpynA
GetThreadLocale
GetCurrentThreadId
AddAtomA
SetStdHandle
lstrlenA
lstrcmpA
GetLastError
GetModuleHandleA
UnhandledExceptionFilter
lstrcatA
LeaveCriticalSection
GetProcAddress
WideCharToMultiByte
VirtualProtect
EnterCriticalSection
GetStringTypeW
CreateFileA
GetDiskFreeSpaceA
FreeLibrary
lstrcpyA
EnumResourceNamesW
DeleteCriticalSection
FindFirstFileA
GetFileAttributesA
FreeEnvironmentStringsW
WriteFile
GetOEMCP
lstrcmpiA
ReadFile
GetStartupInfoA
CloseHandle
MultiByteToWideChar
lstrlenW
GetFullPathNameA
FlushFileBuffers
GetEnvironmentStringsW
IsBadCodePtr
GetStringTypeA
IsBadReadPtr
LCMapStringA
MulDiv
GetEnvironmentStrings
LoadLibraryA
SetUnhandledExceptionFilter
SetFilePointer
GetTickCount
Sleep
InitializeCriticalSection
RaiseException
Sections
.text Size: 137KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ