Static task
static1
Behavioral task
behavioral1
Sample
8f6a4b8353bb9fc83d94515050f9cc21090baa2157101368756fcbe22713572c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f6a4b8353bb9fc83d94515050f9cc21090baa2157101368756fcbe22713572c.exe
Resource
win10v2004-20220812-en
General
-
Target
8f6a4b8353bb9fc83d94515050f9cc21090baa2157101368756fcbe22713572c
-
Size
304KB
-
MD5
cb39481a12694b15490289c436f64699
-
SHA1
800f06cc1175da1195f400ed0a0b1c25d990dd2a
-
SHA256
8f6a4b8353bb9fc83d94515050f9cc21090baa2157101368756fcbe22713572c
-
SHA512
c3004bf1401e91de8b69136a1991e060ca4f743e0c46c501134eb06b0b3ae904c64656b5a189a9c150854a3bd3dd7284a47ce8c36d93a8231f1e89cc17a10116
-
SSDEEP
6144:CbytMMhTQz7IZly0gShbfZVP+9N1iHbYIh2ajluXcIG/zYO2ykGciLOgPz4nANtG:Cbo7hTQzAcefOIh2ajluXcIG/zYO2ykb
Malware Config
Signatures
Files
-
8f6a4b8353bb9fc83d94515050f9cc21090baa2157101368756fcbe22713572c.exe windows x86
233d923e7a0c8995636645054b3aaa9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
CloseHandle
ReadFile
WriteFile
VirtualAlloc
CreateFileA
GetLastError
OpenMutexA
Sleep
CreateMutexA
ResumeThread
CreateThread
GetProcAddress
GetModuleHandleA
ExitProcess
GlobalAlloc
SuspendThread
OpenEventA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
VirtualQuery
user32
GetDesktopWindow
GetCursorPos
SetTimer
GetDC
LoadCursorA
GetWindowRect
SetCursorPos
SetCursor
KillTimer
PostQuitMessage
ReleaseDC
IsIconic
msvfw32
DrawDibStop
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 278KB - Virtual size: 621KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ