Static task
static1
Behavioral task
behavioral1
Sample
8cbcca9c4eeea95d3942ece519e4a6314ec0a63fb4b4322ecac3da3b135c219e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8cbcca9c4eeea95d3942ece519e4a6314ec0a63fb4b4322ecac3da3b135c219e.exe
Resource
win10v2004-20221111-en
General
-
Target
8cbcca9c4eeea95d3942ece519e4a6314ec0a63fb4b4322ecac3da3b135c219e
-
Size
7KB
-
MD5
ddc3b05b1cd0fb93a0d854efc038d015
-
SHA1
d8c8a695f231e6da8e4f0f5485b9198b1b0ef37c
-
SHA256
8cbcca9c4eeea95d3942ece519e4a6314ec0a63fb4b4322ecac3da3b135c219e
-
SHA512
bf51a5b4eafac110e8ef3a48b7d1c15f1d3c1c313865c0414134334477857775158c89715d34b97ada83684adc647092c5b04560501a1d879c9e817da30d0dc0
-
SSDEEP
192:DCXjAsgIHi329IglxRl4RPlRDFPmoynojZ0:D5sm3NaLlYrDxmC
Malware Config
Signatures
Files
-
8cbcca9c4eeea95d3942ece519e4a6314ec0a63fb4b4322ecac3da3b135c219e.exe windows x86
fb0b6ce4c2e4de6ecc6fd488910d958a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindFirstFileW
lstrcatW
CreateDirectoryW
MultiByteToWideChar
lstrlenA
lstrcmpiA
lstrcmpiW
lstrcpyW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetVersionExW
GlobalFree
GetModuleFileNameW
CreateFileW
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceW
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableW
GetShortPathNameW
GetModuleHandleW
CopyFileW
Sleep
GetStartupInfoW
LoadLibraryW
GetProcAddress
CreateEventW
WaitForSingleObject
WriteFile
CloseHandle
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
swprintf
_exit
_XcptFilter
exit
_wcmdln
_initterm
__wgetmainargs
user32
GetWindowThreadProcessId
EndDialog
EnumWindows
PostMessageW
iphlpapi
GetNetworkParams
advapi32
GetUserNameW
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
SHChangeNotify
netapi32
NetUserGetInfo
NetApiBufferFree
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ