Static task
static1
Behavioral task
behavioral1
Sample
8fce0d0618ef2fb33eb8c9ef175035cd33923edde045ba33dac39070df10ee6e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8fce0d0618ef2fb33eb8c9ef175035cd33923edde045ba33dac39070df10ee6e.exe
Resource
win10v2004-20221111-en
General
-
Target
8fce0d0618ef2fb33eb8c9ef175035cd33923edde045ba33dac39070df10ee6e
-
Size
168KB
-
MD5
a66998337b34514ee3023159b75e43bf
-
SHA1
0440e4e947a88e0c8c1e08841a403de1e4901311
-
SHA256
8fce0d0618ef2fb33eb8c9ef175035cd33923edde045ba33dac39070df10ee6e
-
SHA512
35db9b9d0619750034069c9a7691c27fbc43f096ac3322a47fa132a9fc49f1025119955d1efa4826bc047cdc746b1cf64ea2fcc07d74d05b9d33ad008894af00
-
SSDEEP
3072:bF+ideitptlOdD7EXhW7UMs9DP+OxjI9cqnUapkFInhWx7hcnVhX:Lde0I7ESENx9aph2hcnVhX
Malware Config
Signatures
Files
-
8fce0d0618ef2fb33eb8c9ef175035cd33923edde045ba33dac39070df10ee6e.exe windows x86
1c11439bbed871033ab61f5405468e18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
lstrcatA
lstrcpyA
MultiByteToWideChar
lstrlenA
CloseHandle
GetFileTime
GetFileAttributesA
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
ExitProcess
WideCharToMultiByte
SetEnvironmentVariableA
GetTempPathA
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrcmpiA
Sleep
ExpandEnvironmentStringsA
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
user32
wsprintfA
shlwapi
SHDeleteKeyA
msvcrt
_itoa
rand
srand
_ftol
strcpy
tolower
_controlfp
??3@YAXPAX@Z
wcscpy
??2@YAPAXI@Z
_except_handler3
strcat
strncat
strchr
memset
memcpy
__CxxFrameHandler
_CxxThrowException
strstr
strlen
_strnicmp
_memicmp
_strlwr
_stricmp
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ