Static task
static1
Behavioral task
behavioral1
Sample
c8a96e4dd22e08dc29bde35c03c68eeec60df4512889e0054c8b8384f8f459e7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8a96e4dd22e08dc29bde35c03c68eeec60df4512889e0054c8b8384f8f459e7.exe
Resource
win10v2004-20220901-en
General
-
Target
c8a96e4dd22e08dc29bde35c03c68eeec60df4512889e0054c8b8384f8f459e7
-
Size
185KB
-
MD5
ff980a9a5288a445e8e8f7a742db0ce5
-
SHA1
69431e11282458457f325ba79d7d31ba841ca20a
-
SHA256
c8a96e4dd22e08dc29bde35c03c68eeec60df4512889e0054c8b8384f8f459e7
-
SHA512
e9d308be90bc0bb6ad7eeb549d76dfacd9051fbff265f5f0a0c2e090d4e597bda67bbcc8429cdbf6f55600558426659f1492b86e5dc074428dec2b6056c7bab0
-
SSDEEP
3072:G8vEXn0zPTkX7l7JvmlsTIu+/gqN0A4HSJN/msH78jRvDvDBW6UpZuu6T5+u+FG:GkUj777ggqX4HS3781vDbBWuu6tV+c
Malware Config
Signatures
Files
-
c8a96e4dd22e08dc29bde35c03c68eeec60df4512889e0054c8b8384f8f459e7.exe windows x86
6a82bc36b920a0ff172dc0b4ce73058d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
GetModuleHandleA
GetModuleHandleA
InterlockedDecrement
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LocalFree
GetLastError
CreateMutexW
LocalAlloc
OpenMutexW
WaitForSingleObject
ResetEvent
CloseHandle
SetEvent
ReleaseMutex
FindClose
FindFirstFileW
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
user32
DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC
shell32
ShellExecuteExW
SHAddFromPropSheetExtArray
SHGetFolderLocation
SHAppBarMessage
Shell_NotifyIconW
FindExecutableW
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ