Static task
static1
Behavioral task
behavioral1
Sample
8eb4712e002fba0e9646106490cf4985bb388f2af3bf8f986175be0898a20cc6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8eb4712e002fba0e9646106490cf4985bb388f2af3bf8f986175be0898a20cc6.exe
Resource
win10v2004-20221111-en
General
-
Target
8eb4712e002fba0e9646106490cf4985bb388f2af3bf8f986175be0898a20cc6
-
Size
361KB
-
MD5
19cb951cb1584887802fc8694e4e71a6
-
SHA1
4f71375ce753fbbd6a0790531623ec8ba38dfa4a
-
SHA256
8eb4712e002fba0e9646106490cf4985bb388f2af3bf8f986175be0898a20cc6
-
SHA512
b7b99206a0be4b50ec3dfef7e484e9ed285b10535572881df3f02b6fecadab4df2c14050c785d6252b65e9fa216e51fd7430c069953c786f7a125d3ae12ded30
-
SSDEEP
6144:G3dRK7KlgwYn0T+aUZYw+O/r3gtDlz1C7nucYcfLhVswEnCaKj/qTfmn/1CIayR:G3nK7DF0Tpw1zws7nu1cf3ed8sundCIR
Malware Config
Signatures
Files
-
8eb4712e002fba0e9646106490cf4985bb388f2af3bf8f986175be0898a20cc6.exe windows x86
8721f93c30255b29d1c7a6535afe3b0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
SetComputerNameA
GetSystemTime
VirtualAlloc
GetModuleHandleA
Sleep
LoadLibraryA
GlobalFree
LocalAlloc
GetTickCount
GlobalAlloc
CreateThread
FreeResource
SizeofResource
GlobalReAlloc
LoadResource
FindResourceExA
VirtualProtect
GetProcAddress
VirtualQuery
SetLastError
CloseHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
GetLastError
VirtualFree
CreateFileA
CopyFileExA
LocalFree
LockResource
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW
user32
wsprintfA
IsWindowVisible
LoadIconA
MessageBoxA
GetDesktopWindow
gdi32
CreateBitmapIndirect
advapi32
RegOpenKeyExA
RegCloseKey
RegFlushKey
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ