Static task
static1
Behavioral task
behavioral1
Sample
f8bdf448430dd75dc72e474a2f90fa9985b714fadf354fd356f5855eff19730d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8bdf448430dd75dc72e474a2f90fa9985b714fadf354fd356f5855eff19730d.exe
Resource
win10v2004-20220812-en
General
-
Target
f8bdf448430dd75dc72e474a2f90fa9985b714fadf354fd356f5855eff19730d
-
Size
871KB
-
MD5
7d7d100de42f9ce33e54dfe52516dd09
-
SHA1
74b0bc75989a92f9e4d0be78ab72da556af865c0
-
SHA256
f8bdf448430dd75dc72e474a2f90fa9985b714fadf354fd356f5855eff19730d
-
SHA512
b55fe181ea04d4dcbd38897d2a125f7621a1a1233da97b4ae12bbb9bf0b4b36f11d6703c43d1e5e5cd16bd10ed11a65003612429d0d3373b6a1a1b3503be5b05
-
SSDEEP
12288:Ib8aIK0V0ml7+whWgWOjayMxa4f1fEHJWJ2c3G/NZZH/CSyBAcKGFxD:48an3msNyN4fZCkUJ/shBAcxx
Malware Config
Signatures
Files
-
f8bdf448430dd75dc72e474a2f90fa9985b714fadf354fd356f5855eff19730d.exe windows x86
33e6bf9e246ab9695603ab1b272e364d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
CreateFileMappingA
GetDriveTypeA
GetACP
TlsGetValue
CancelIo
lstrlenA
IsDebuggerPresent
ReleaseMutex
PulseEvent
GetModuleHandleA
GetModuleFileNameA
IsBadStringPtrA
HeapCreate
CreateFileA
SuspendThread
ResumeThread
GetEnvironmentVariableA
GetStartupInfoA
GetStdHandle
user32
DispatchMessageA
DestroyMenu
GetClassInfoW
DispatchMessageA
PeekMessageA
IsZoomed
CallWindowProcW
FindWindowW
DestroyWindow
GetWindowLongA
GetSysColor
DrawTextW
IsWindow
amstream
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
clbcatq
ComPlusMigrate
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 863KB - Virtual size: 862KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ