Static task
static1
Behavioral task
behavioral1
Sample
8f818d335261182cda357b1949d9b5a681218d3ea2dd0d5eb834060ddccc034c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f818d335261182cda357b1949d9b5a681218d3ea2dd0d5eb834060ddccc034c.exe
Resource
win10v2004-20220812-en
General
-
Target
8f818d335261182cda357b1949d9b5a681218d3ea2dd0d5eb834060ddccc034c
-
Size
91KB
-
MD5
1996ef49d5303b5cf848d6b9fada95f0
-
SHA1
ef13a4da8885b824af6881e04d3015fde9c4810e
-
SHA256
8f818d335261182cda357b1949d9b5a681218d3ea2dd0d5eb834060ddccc034c
-
SHA512
6985b0067784146c49bb59b3422a244581f148102632ad4ec7b19c879bc83e5c63bfb117d7be505a79986a69b68e71abbeb853122a535cbab4511ccc3fe6138f
-
SSDEEP
1536:19wXzBjdisbHIRJAjacVbawZ4AwlcbS/7+WQGCaCwHCCnbDtNhkE:QzhksbHVLVb3GCbSqW/hCwlH
Malware Config
Signatures
Files
-
8f818d335261182cda357b1949d9b5a681218d3ea2dd0d5eb834060ddccc034c.exe windows x86
f02e02f09514fcd4071d0648ab2c95a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
GradientFill
kernel32
IsDebuggerPresent
Sleep
ExitProcess
CreateFileA
GetTickCount
GlobalAlloc
ReadFile
GetLocalTime
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
user32
GetClassInfoA
msvcr90
_configthreadlocale
__setusermatherr
_adjust_fdiv
_initterm_e
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
__p__commode
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ