Static task
static1
Behavioral task
behavioral1
Sample
a8840e5d8f60495ebc1763f9b00698b4a446ea4c257ef7d2dd38e7c47e333bcb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8840e5d8f60495ebc1763f9b00698b4a446ea4c257ef7d2dd38e7c47e333bcb.exe
Resource
win10v2004-20220901-en
General
-
Target
a8840e5d8f60495ebc1763f9b00698b4a446ea4c257ef7d2dd38e7c47e333bcb
-
Size
312KB
-
MD5
79469e29ada88effdcb8d633c4c0c4f1
-
SHA1
295c5191cbd2714e0e61eebcaabea8ca20995962
-
SHA256
a8840e5d8f60495ebc1763f9b00698b4a446ea4c257ef7d2dd38e7c47e333bcb
-
SHA512
edf3bc9a9533e9e9701f48a49da9f5cc12f8c691caa2fc68b404a42eecbd826f7dfb0865f54ade2e99ffef2081f78d63eeda5af84894c8630e4f8bf63d4b76f8
-
SSDEEP
6144:AnTDhfPyxlXpJbgCSSzWs1MCQwZLApN7sbBIwRV/t3NOTr7Gn520TQmU:MfylXpJ8C9as1XQwZLApN76vVtQX7gk1
Malware Config
Signatures
Files
-
a8840e5d8f60495ebc1763f9b00698b4a446ea4c257ef7d2dd38e7c47e333bcb.exe windows x86
518eaa3b0aa177bcdc622607b3b45e9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SetConsoleOutputCP
GlobalDeleteAtom
GetDriveTypeA
RaiseException
GlobalAddAtomA
FileTimeToLocalFileTime
SetErrorMode
GetACP
CloseHandle
LockResource
HeapCreate
VirtualProtect
GlobalFree
EnterCriticalSection
LoadLibraryExA
GlobalUnlock
InterlockedExchange
GetLocaleInfoA
GetLastError
Sleep
user32
ValidateRect
EndPaint
OemToCharW
DrawTextA
GetMenuItemInfoA
ReleaseDC
BeginPaint
DrawEdge
GetWindow
ClipCursor
GetCursorPos
GetWindowTextA
GetParent
GetActiveWindow
GetFocus
GetClassNameA
ShowWindow
SetForegroundWindow
IsIconic
httpapi
HttpAddUrl
HttpCreateHttpHandle
HttpInitialize
HttpTerminate
HttpRemoveUrl
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ