Static task
static1
Behavioral task
behavioral1
Sample
8bc9ade4ed4d6ea38ba60ba4722c08e6c60051b87d6aad3fd8a78d24abc61d65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8bc9ade4ed4d6ea38ba60ba4722c08e6c60051b87d6aad3fd8a78d24abc61d65.exe
Resource
win10v2004-20220901-en
General
-
Target
8bc9ade4ed4d6ea38ba60ba4722c08e6c60051b87d6aad3fd8a78d24abc61d65
-
Size
550KB
-
MD5
6c2bdbe4a05394bd07d3c5cb1ef3e4ce
-
SHA1
b97023af779e32eb80f9374d638953b89398ab7a
-
SHA256
8bc9ade4ed4d6ea38ba60ba4722c08e6c60051b87d6aad3fd8a78d24abc61d65
-
SHA512
f828c3f1447d94d45e171b867c7f31d5a01c7696040b20b614c1f3aabe4bc02e1dab6917843d665250ddd56c6a3c4a34dc3f74755ecc9bfe2b9a0dec4099e8b0
-
SSDEEP
12288:HTJYMTw0s/iIxz9XTzzwbIQ7w+TmejNpYtlovVgMbRV4Q:JOn+S+3YtlovGMFV4Q
Malware Config
Signatures
Files
-
8bc9ade4ed4d6ea38ba60ba4722c08e6c60051b87d6aad3fd8a78d24abc61d65.exe windows x86
76d140b22a5fade2c6cfe3636c8e221c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetShortPathNameA
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
CreateFileA
GetFileSize
SetFilePointer
GetFileInformationByHandle
ReadFile
WriteFile
SetEndOfFile
CompareFileTime
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
GetVersionExA
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
CreateProcessA
ExpandEnvironmentStringsW
GetCommandLineW
GetStartupInfoA
GetModuleHandleA
user32
DestroyWindow
EndDialog
PostMessageA
KillTimer
GetDlgItem
SendMessageA
SetTimer
LoadIconA
MessageBoxW
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
GetWindowTextLengthA
SetWindowTextW
SetWindowTextA
CreateWindowExA
CreateWindowExW
CharUpperW
RegisterClassA
LoadStringW
LoadStringA
CharPrevA
CharNextA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
GetWindowLongA
SetWindowLongA
CreateDialogParamA
ShowWindow
MoveWindow
GetWindowRect
SystemParametersInfoA
GetDialogBaseUnits
CharToOemA
CharLowerW
CharLowerA
RegisterClassW
CharUpperA
CharPrevExA
shell32
ShellExecuteA
oleaut32
VariantCopy
VariantClear
SysAllocStringByteLen
SysAllocString
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
realloc
strlen
free
malloc
memcpy
memmove
_purecall
memcmp
_CxxThrowException
__CxxFrameHandler
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ