Static task
static1
Behavioral task
behavioral1
Sample
8373c596e470d424db683af4a46bd3fd377925e5b1b31962af4c57de1eb22552.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8373c596e470d424db683af4a46bd3fd377925e5b1b31962af4c57de1eb22552.exe
Resource
win10v2004-20220812-en
General
-
Target
8373c596e470d424db683af4a46bd3fd377925e5b1b31962af4c57de1eb22552
-
Size
17KB
-
MD5
4d22abeabb34324ced05931ef43adfe4
-
SHA1
70f9997cac3ae9eacf706768206729f8912e642a
-
SHA256
8373c596e470d424db683af4a46bd3fd377925e5b1b31962af4c57de1eb22552
-
SHA512
7fe9678f0de1126c80cc3a7e06804bf4a3237191fbe8c284862e24409b34b08863cf31420565b1a7b7616ae21b8c86b63f385c662a0af13601c7123b18e11eaf
-
SSDEEP
384:G4f1oBO/rrZEBBq6QPI0Xw2rQ4g8nafizNRpGJ4TW+KlLS8:Gu5/3ZeKJg2rQ4gx4Te
Malware Config
Signatures
Files
-
8373c596e470d424db683af4a46bd3fd377925e5b1b31962af4c57de1eb22552.exe windows x86
e6b56b89f314cc6ddd6e6e3c486b2064
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
CreateDirectoryA
SetUnhandledExceptionFilter
OpenProcess
TerminateProcess
CreateMutexA
InterlockedCompareExchange
InterlockedDecrement
VirtualProtect
OpenMutexA
FindResourceA
GlobalFree
VirtualFree
VirtualQuery
LCMapStringA
VirtualAlloc
GlobalAlloc
GetStartupInfoA
LockResource
GetLastError
CloseHandle
SizeofResource
LoadResource
ReleaseMutex
IsDebuggerPresent
GlobalUnlock
GlobalLock
GetCurrentProcessId
ExitProcess
LocalFree
FormatMessageA
ReadFile
CreateFileA
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
user32
GetMessageA
MessageBoxA
KillTimer
TranslateMessage
LoadStringA
wsprintfA
SetTimer
LoadCursorA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ