Static task
static1
Behavioral task
behavioral1
Sample
8dd3d116a31696debe2a7462fd2ffa1c8613e9d3ffb3346e50f7e767902128c6.exe
Resource
win7-20221111-en
General
-
Target
8dd3d116a31696debe2a7462fd2ffa1c8613e9d3ffb3346e50f7e767902128c6
-
Size
3.5MB
-
MD5
4bbd80f17af3eb95cf1bf5b3a667726a
-
SHA1
77cf515556cfefa49fff5f90dc9ce4d7c24a8968
-
SHA256
8dd3d116a31696debe2a7462fd2ffa1c8613e9d3ffb3346e50f7e767902128c6
-
SHA512
c9dc6ff554a81a37fd90fa1af6ad4bbb5bc66adc8092feefc90f82ef4eded71755146f969a7af1a4710d0dfed56d405ccb587b47a26e2074612f4490fc054b27
-
SSDEEP
98304:3g+I0ybmHAD1rt7mz1zKTHjnMJ5V5ZBc8b6aSb:k0SYADb7IErqX
Malware Config
Signatures
Files
-
8dd3d116a31696debe2a7462fd2ffa1c8613e9d3ffb3346e50f7e767902128c6.exe windows x86
1783d22575d9041cf018dc76137bbfe7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
GetVersionExA
GetVersion
VirtualQuery
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateMenu
advapi32
RegOpenKeyExA
oleaut32
GetActiveObject
version
GetFileVersionInfoA
gdi32
CreatePalette
ole32
OleDraw
comctl32
ImageList_Draw
shell32
ShellExecuteExA
comdlg32
GetOpenFileNameA
Sections
CODE Size: - Virtual size: 823KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 470KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ