Static task
static1
Behavioral task
behavioral1
Sample
8ea12c8e0e6b8abf922d0cb2dc908bbc0a285be2d00e90234207cd8671cdfa60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ea12c8e0e6b8abf922d0cb2dc908bbc0a285be2d00e90234207cd8671cdfa60.exe
Resource
win10v2004-20220812-en
General
-
Target
8ea12c8e0e6b8abf922d0cb2dc908bbc0a285be2d00e90234207cd8671cdfa60
-
Size
186KB
-
MD5
bf0cc1775c6a29e08ef80e44c0b6a954
-
SHA1
edd7146eed40fd75c60529c288a13030c5f21bce
-
SHA256
8ea12c8e0e6b8abf922d0cb2dc908bbc0a285be2d00e90234207cd8671cdfa60
-
SHA512
4f23d8aa1a87b38655923f03de7a8735ba659ed5a982af36e53d1ba013ec5dc43ae5a4877a1053decc9d8bd4ac934d37a735649067a4a311a084b839bf2ddfba
-
SSDEEP
3072:Cd8Ym1O/zb64LorYZbDwKKXhsB/EwoUGx4u/mY8wqP4ab+FLK6rf/SW8QutCh/MH:Cd8Ym1O/zbbokZbsKK8o784E+rryW8QG
Malware Config
Signatures
Files
-
8ea12c8e0e6b8abf922d0cb2dc908bbc0a285be2d00e90234207cd8671cdfa60.exe windows x86
9fa5f25e0605bcec112d89453daf4e06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gdi32
StretchBlt
user32
ReleaseDC
advapi32
CloseServiceHandle
comctl32
ImageList_Draw
shell32
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
version
GetFileVersionInfoSizeA
oleaut32
OleLoadPicture
Sections
.text Size: 146KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE