Static task
static1
Behavioral task
behavioral1
Sample
8fd11c0492a0c316f6075d3cb280e8c6e9ba45f0c2c92d5d922a92e8bd373ff3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8fd11c0492a0c316f6075d3cb280e8c6e9ba45f0c2c92d5d922a92e8bd373ff3.exe
Resource
win10v2004-20221111-en
General
-
Target
8fd11c0492a0c316f6075d3cb280e8c6e9ba45f0c2c92d5d922a92e8bd373ff3
-
Size
18KB
-
MD5
d89694333b22ed09b8e7a7f6cc8b8f39
-
SHA1
72ee6daa83fe81105718509796b7bf16c21d3a20
-
SHA256
8fd11c0492a0c316f6075d3cb280e8c6e9ba45f0c2c92d5d922a92e8bd373ff3
-
SHA512
658ed84610b04c1b0e20c1fb27ea73bb24d4ddd7026bf6249bd3761570efbb6b9c8a7650aa7aed8cc8705cdd99c537d7aaef459d6e5bc71a5bba67c9bcaa5190
-
SSDEEP
384:a4rQUz4StiJTzTHrGtW4Pnuw7HihrHvQF16w+zW3BZJW6Hhsn9:aJUbiJDLGjkhrvC1+z1sq9
Malware Config
Signatures
Files
-
8fd11c0492a0c316f6075d3cb280e8c6e9ba45f0c2c92d5d922a92e8bd373ff3.exe windows x86
cc418495858535ed563018db6edb0c1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
VirtualAlloc
GetModuleHandleA
DeleteFileA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ReadFile
CreateFileA
IsDebuggerPresent
SetErrorMode
GetLastError
UnmapViewOfFile
CreateFileMappingA
FormatMessageA
LocalFree
ExitProcess
GetCommandLineA
GetTempPathA
CloseHandle
MapViewOfFile
SetUnhandledExceptionFilter
user32
wsprintfA
MessageBoxA
ReleaseDC
GetSysColor
SetWindowPos
ScreenToClient
GetDC
FillRect
CreateWindowExA
gdi32
GetDeviceCaps
DeleteDC
SelectObject
SetBkColor
DeleteObject
SetTextColor
advapi32
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ