Static task
static1
Behavioral task
behavioral1
Sample
8f32d2413bfdbfd392e7412338fa3e220e7de55f23f72436ffaee4662242e557.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f32d2413bfdbfd392e7412338fa3e220e7de55f23f72436ffaee4662242e557.exe
Resource
win10v2004-20220812-en
General
-
Target
8f32d2413bfdbfd392e7412338fa3e220e7de55f23f72436ffaee4662242e557
-
Size
252KB
-
MD5
cd463b4ee3674caa226e22a38ac6a873
-
SHA1
5d81bb50525d40d936da0c6bdcc83ad0c3bfc486
-
SHA256
8f32d2413bfdbfd392e7412338fa3e220e7de55f23f72436ffaee4662242e557
-
SHA512
8764cecd982809f1481dfcd7e207b47887f36afb828e07a77e1489a3860131a5f239105b3ce2e1b9f81f59ec333446baa19614fd562d4fb1267e5de4758b1c8c
-
SSDEEP
6144:rybLF15h9DRwO8T/lepP0wdVtuwG77rFEE0UJUd6HprZjYWplD:r0LFLh9tmlKcWrqH2UadmpljvbD
Malware Config
Signatures
Files
-
8f32d2413bfdbfd392e7412338fa3e220e7de55f23f72436ffaee4662242e557.exe windows x86
869e464d1fb82f163bed4187eff67fa4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExW
WindowFromPoint
IsWindowVisible
IsWindow
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
gdi32
SetRectRgn
CreateFontIndirectA
GetTextColor
DeleteObject
FrameRgn
GetStockObject
kernel32
GetEnvironmentVariableA
GetEnvironmentStrings
GetPrivateProfileStringA
HeapCreate
GetStartupInfoA
SetFileAttributesA
GetLocalTime
InitializeCriticalSection
EnterCriticalSection
GetTickCount
GetLastError
GetThreadLocale
HeapFree
GetDateFormatA
HeapAlloc
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ