Static task
static1
Behavioral task
behavioral1
Sample
8fe9afc9f1d8acdea1833e115e60fb6b664b38e3414cd7bf68748435d238f205.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8fe9afc9f1d8acdea1833e115e60fb6b664b38e3414cd7bf68748435d238f205.exe
Resource
win10v2004-20221111-en
General
-
Target
8fe9afc9f1d8acdea1833e115e60fb6b664b38e3414cd7bf68748435d238f205
-
Size
192KB
-
MD5
d2702e1b94fba7688fa98a02050900ec
-
SHA1
5f3db3110d7c0b7fbadb70e73c4227bec86e830b
-
SHA256
8fe9afc9f1d8acdea1833e115e60fb6b664b38e3414cd7bf68748435d238f205
-
SHA512
d21caa24a22a5cecf09e36086ccbd93482f9617c928edd3a72ae86fbc517610c3674b0ce5369df7b28db4ef6075cce26b3319cf8b9fe2198d29cbb9bdd7dfeec
-
SSDEEP
3072:6Z6yn7u1v176XaEcduTjdZJ18G0QKKUFplccbo6PWlKMswIcNZgkui:6Zr7m7oHTJB8d2LKMsjj
Malware Config
Signatures
Files
-
8fe9afc9f1d8acdea1833e115e60fb6b664b38e3414cd7bf68748435d238f205.exe windows x86
e606d85c41bc6a09f733b69edfa52cad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerFindFileA
GetFileVersionInfoA
VerQueryValueA
ole32
CoReleaseMarshalData
ReleaseStgMedium
WriteClassStm
CLSIDFromString
CoGetMalloc
OleRegGetUserType
StgOpenStorage
CLSIDFromProgID
CoUninitialize
StgCreateDocfileOnILockBytes
gdi32
GetDIBits
GetRgnBox
SetPixel
CreateCompatibleDC
kernel32
GetFullPathNameA
LockResource
SetFilePointer
IsBadReadPtr
LocalReAlloc
MulDiv
GetCommandLineW
LoadLibraryA
EnumCalendarInfoA
GetThreadLocale
LoadLibraryExA
MoveFileExA
lstrcmpiA
VirtualQuery
GetStdHandle
CreateEventA
HeapFree
GetCurrentProcessId
ExitThread
SetEvent
FreeLibrary
GetStringTypeW
GetACP
GetLastError
InitializeCriticalSection
GetModuleHandleW
RaiseException
GetCurrentProcess
GetSystemDefaultLangID
GetLocalTime
FreeResource
HeapAlloc
GlobalFindAtomA
lstrlenA
Sleep
ExitProcess
LocalFree
WideCharToMultiByte
VirtualAllocEx
SetHandleCount
GetDateFormatA
SetEndOfFile
CreateFileA
DeleteFileA
GlobalAlloc
GetModuleHandleA
VirtualAlloc
SetLastError
MoveFileA
LoadResource
GetProcAddress
SetErrorMode
Sections
CODE Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ