Static task
static1
Behavioral task
behavioral1
Sample
d8823be00cf5e6b129a6b287c40620bde9b3e24c76573e9ae20a7ded80e8b50b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8823be00cf5e6b129a6b287c40620bde9b3e24c76573e9ae20a7ded80e8b50b.exe
Resource
win10v2004-20220812-en
General
-
Target
d8823be00cf5e6b129a6b287c40620bde9b3e24c76573e9ae20a7ded80e8b50b
-
Size
169KB
-
MD5
6f70ffe9fd04df9fdb8724cda6333ae4
-
SHA1
4b3271d08b04f2f01c5a5bd8f26fe47576451cb7
-
SHA256
d8823be00cf5e6b129a6b287c40620bde9b3e24c76573e9ae20a7ded80e8b50b
-
SHA512
f018dcd34b6fae1950bc8b97eef40890ed38fe45aad89973844fb00b79789ac79d80c8a875413fb57790314d6e1ae3d1f432b7b9f5285387c558f286b2abb8a0
-
SSDEEP
3072:7Zl7eJve/RNnEbaTT6Sn1ccJWyyShXDfBXoKGw9G1NEQXsBOTFgM9hgyoHfTDB:VteJW/s6mj+XvuNHs8TF9hgZbD
Malware Config
Signatures
Files
-
d8823be00cf5e6b129a6b287c40620bde9b3e24c76573e9ae20a7ded80e8b50b.exe windows x86
eb81423550e97798b7ae30f3673deecb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetFileAttributesA
SetStdHandle
GetCurrentThreadId
lstrcmpA
MulDiv
GetOEMCP
GetEnvironmentStrings
ReadFile
AddAtomA
DeleteCriticalSection
FreeEnvironmentStringsA
GetLastError
GetDiskFreeSpaceA
SetUnhandledExceptionFilter
GetThreadLocale
Sleep
lstrlenA
FreeLibrary
CloseHandle
lstrcpyA
MultiByteToWideChar
EnterCriticalSection
GetFullPathNameA
VirtualProtect
SetFilePointer
LoadLibraryA
GetModuleHandleA
InitializeCriticalSection
EnumResourceNamesW
GetStringTypeW
FlushFileBuffers
lstrcatA
LeaveCriticalSection
GetCPInfo
GetStringTypeA
GetTickCount
IsBadReadPtr
WriteFile
FreeEnvironmentStringsW
lstrlenW
FindFirstFileA
LCMapStringA
CreateFileA
UnhandledExceptionFilter
GetStartupInfoA
LCMapStringW
GetProcAddress
WideCharToMultiByte
lstrcpynA
GetEnvironmentStringsW
lstrcmpiA
IsBadCodePtr
RaiseException
Sections
.text Size: 90KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ