Static task
static1
Behavioral task
behavioral1
Sample
b8afde2a20dde44ab44af43e76beda5fa398419fb949545c64ceb04207680a75.exe
Resource
win7-20220812-en
General
-
Target
b8afde2a20dde44ab44af43e76beda5fa398419fb949545c64ceb04207680a75
-
Size
275KB
-
MD5
d6fdaa0f35b1a582c9e63a0ef6b40cc5
-
SHA1
1ad5cdf4e1eeaf435c4996665eecdac6e0c30be5
-
SHA256
b8afde2a20dde44ab44af43e76beda5fa398419fb949545c64ceb04207680a75
-
SHA512
4082761d14534640a0728760814c6e2d5a6eb72e2e6fde61b6ce2e00dfd2767b03fdbbabca7ce67b1a2261d847627f746644e53fcc46e2a3a3b8d1d5e62eb557
-
SSDEEP
3072:UJBVjSN+WomNyI9NG7s2rI2uRerWpT/U6yvZX42TWALuKVyI9K3gxlUQh/AjdHoM:6SyWN126EWpAK2pZVj9K3mAj1nd
Malware Config
Signatures
Files
-
b8afde2a20dde44ab44af43e76beda5fa398419fb949545c64ceb04207680a75.exe windows x86
e93f5037b9bfd14991412da1d9d1ef86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
LoadStringA
CharUpperA
PostThreadMessageA
EnumWindows
CharNextA
GetMessageA
MessageBoxA
GetWindowThreadProcessId
DispatchMessageA
IsWindowVisible
wsprintfW
SetTimer
PeekMessageA
GetWindowTextA
wsprintfA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GlobalAddAtomW
SetConsoleCtrlHandler
GetFileType
HeapDestroy
WriteFile
HeapCreate
GetOEMCP
VirtualFree
GetEnvironmentVariableA
WideCharToMultiByte
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointer
EnumResourceNamesA
IsBadWritePtr
FreeEnvironmentStringsA
IsBadCodePtr
GetCPInfo
GetEnvironmentStrings
GetStartupInfoA
GetDateFormatW
SetHandleCount
FatalAppExitA
GetACP
UnhandledExceptionFilter
VirtualAlloc
GetStdHandle
HeapReAlloc
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentThread
Sections
.text Size: 139KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ