Static task
static1
Behavioral task
behavioral1
Sample
f8d11cb699598cc04af1eff949db3266627c108103408bca6b8f84b27be45761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8d11cb699598cc04af1eff949db3266627c108103408bca6b8f84b27be45761.exe
Resource
win10v2004-20221111-en
General
-
Target
f8d11cb699598cc04af1eff949db3266627c108103408bca6b8f84b27be45761
-
Size
241KB
-
MD5
98e3eafe86f3c6ee80b15eb1488a2fcf
-
SHA1
e927398605140b7f12594aa6751fccb1d400a168
-
SHA256
f8d11cb699598cc04af1eff949db3266627c108103408bca6b8f84b27be45761
-
SHA512
b4bb785f222149e056e1a0aa9e044eb5b3c44cfce35b202d96a5661ae029e402695adca1779266dadd7eaafc28a545a5e9641b818550e03330d4ce613428b893
-
SSDEEP
6144:QjHX8cOQHmxVDprCwBrfazfsRj8LZsxbzSNmbofyL11s:MX8jQGxjLwkRj8FsxbzSNqo6LY
Malware Config
Signatures
Files
-
f8d11cb699598cc04af1eff949db3266627c108103408bca6b8f84b27be45761.exe windows x86
09f9255fc62b197170d9e67c5f81434c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
TlsGetValue
GetModuleHandleW
TlsSetValue
GetSystemDefaultLCID
IsDBCSLeadByte
VirtualAlloc
GetCurrentThread
GetLogicalDrives
lstrcmpA
lstrcatA
GetModuleFileNameA
GetDriveTypeW
TlsFree
GetCommandLineA
FreeLibrary
TlsAlloc
GetCurrentThreadId
GetUserDefaultLangID
GetCurrentProcessId
GetCurrentProcess
user32
CreateWindowExA
GetWindowTextLengthA
ShowWindow
GetFocus
RegisterClassA
GetForegroundWindow
UpdateWindow
BeginPaint
GetActiveWindow
ReleaseDC
IsIconic
GetWindow
GetDC
GetWindowTextA
GetWindowDC
GetWindowLongA
IsWindowVisible
GetClassLongA
GetSystemMetrics
shell32
StrCmpNA
StrRChrIA
StrChrIA
StrCmpNIA
StrChrA
StrRChrA
msctf
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
TF_GetThreadFlags
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ