Static task
static1
Behavioral task
behavioral1
Sample
8881139555d9783a39b0ae65df574ca0c24a1571f1dc7a7d668a2335bcee7b82.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8881139555d9783a39b0ae65df574ca0c24a1571f1dc7a7d668a2335bcee7b82.exe
Resource
win10v2004-20221111-en
General
-
Target
8881139555d9783a39b0ae65df574ca0c24a1571f1dc7a7d668a2335bcee7b82
-
Size
523KB
-
MD5
dbdcd687805bdad92574302857696558
-
SHA1
8776036adce03dace270dd89949831efa2e1927c
-
SHA256
8881139555d9783a39b0ae65df574ca0c24a1571f1dc7a7d668a2335bcee7b82
-
SHA512
267403bec4d06d9265881350ceed085009d9f566329547bb7b732ef9e929bd79fb39fdfdba23216a9082327aec87083fff35168b1de3db7c4d4943a8fcf9b6a7
-
SSDEEP
12288:Lre1KaDp1S6+OzssR4qFIec5qar+I0niFSoNrzwe:Lre1z1yW1aPt5qgveihXwe
Malware Config
Signatures
Files
-
8881139555d9783a39b0ae65df574ca0c24a1571f1dc7a7d668a2335bcee7b82.exe windows x86
28a7dcc7c3d618943544ff535d1aba57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
ReleaseMutex
LoadLibraryA
CreateMutexA
CompareStringW
SetCriticalSectionSpinCount
SetConsoleTitleW
HeapReAlloc
GetEnvironmentStringsA
LCMapStringW
MultiByteToWideChar
HeapDestroy
TlsAlloc
CompareStringA
GetLastError
GetCPInfo
SetSystemTime
GetModuleHandleA
ReadConsoleW
GetSystemDefaultLangID
SetHandleCount
GetSystemTime
GetEnvironmentStringsW
VirtualQuery
IsBadWritePtr
GetCurrentProcessId
GetCurrentThreadId
EnumSystemCodePagesW
GetACP
DebugActiveProcess
FreeEnvironmentStringsA
GetTimeZoneInformation
GetCurrentProcess
InterlockedIncrement
HeapCreate
InterlockedDecrement
TlsSetValue
WriteFile
VirtualAlloc
SetStdHandle
WideCharToMultiByte
GetCommandLineA
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
GetThreadLocale
RtlUnwind
GetStartupInfoA
UnlockFile
lstrcmpA
FoldStringA
TlsFree
FlushFileBuffers
DeleteCriticalSection
SetConsoleCursorInfo
TerminateProcess
SetEnvironmentVariableA
ReadFile
CreateRemoteThread
InterlockedExchange
LCMapStringA
GetProcAddress
GetSystemTimeAsFileTime
GetModuleFileNameA
SetLastError
TlsGetValue
GetFileType
WritePrivateProfileStructA
GetCurrentThread
OpenMutexA
GetVersion
InitializeCriticalSection
FreeEnvironmentStringsW
GetStringTypeA
CloseHandle
UnlockFileEx
HeapAlloc
LeaveCriticalSection
GetLocalTime
ExitProcess
UnhandledExceptionFilter
GetEnvironmentStrings
GetStringTypeW
GetOEMCP
SetFilePointer
EnterCriticalSection
comctl32
ImageList_Remove
ImageList_AddMasked
ImageList_BeginDrag
InitCommonControlsEx
ImageList_DrawEx
shell32
ExtractIconExW
SHGetMalloc
CommandLineToArgvW
ExtractIconW
SHFileOperationA
user32
CreateWindowExA
GetUpdateRect
DestroyAcceleratorTable
SwitchDesktop
GetDC
ShowWindow
LockWindowUpdate
MessageBoxA
GetDialogBaseUnits
OemToCharBuffW
CreateMDIWindowW
ChangeClipboardChain
ValidateRgn
MessageBoxW
DefWindowProcW
RegisterClassA
RealGetWindowClass
UnregisterHotKey
DialogBoxIndirectParamA
AttachThreadInput
DestroyWindow
RegisterClassExA
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 213KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ