?SETCONFIG@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
b8e5d51fcdd1b28712d2b092ba8a4809064724757db9e163b3786c0a3d22d405.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8e5d51fcdd1b28712d2b092ba8a4809064724757db9e163b3786c0a3d22d405.exe
Resource
win10v2004-20220812-en
General
-
Target
b8e5d51fcdd1b28712d2b092ba8a4809064724757db9e163b3786c0a3d22d405
-
Size
128KB
-
MD5
d8544f956821cc0c73244143f2af3314
-
SHA1
8a1c31c2873a52c51e2e5a47f2bdd18e6c3d3bbb
-
SHA256
b8e5d51fcdd1b28712d2b092ba8a4809064724757db9e163b3786c0a3d22d405
-
SHA512
7886015d8d455a6c3753462dfedab661b4e041b58efee8683d14e4fc367c147d2b734d8a2d1fe59e9b91c12af2b9241ddf12a50f6f46a98f1031789ec0266d2a
-
SSDEEP
1536:SX3AQVE82hnt48SEAlky3hsVAO3i6uOb7SLEReT/k9h2eBXGcc4:SXQPLnt4eFcu9y63HSbbdAWcc4
Malware Config
Signatures
Files
-
b8e5d51fcdd1b28712d2b092ba8a4809064724757db9e163b3786c0a3d22d405.exe windows x86
3df37e6cef6bebd91472ffb7322b7cf2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
kernel32
SetThreadPriority
CloseHandle
SetEvent
CreateSemaphoreA
DeleteFileW
GetTickCount
PulseEvent
GetLastError
GetProcAddress
Sleep
WaitForSingleObject
VirtualAlloc
GetModuleHandleA
SuspendThread
HeapSize
SetStdHandle
RtlUnwind
LCMapStringW
LCMapStringA
TerminateThread
DeleteFileA
RaiseException
FlushFileBuffers
ReadFile
GetStringTypeW
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
LoadLibraryA
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetLocaleInfoA
user32
LoadCursorW
LoadImageA
LoadIconW
LoadBitmapW
gdi32
CreateCompatibleBitmap
oleaut32
VariantInit
winmm
mciSendCommandA
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ