Static task
static1
Behavioral task
behavioral1
Sample
8b9c11ff7035097d437ab28f7e667c1ffc3bfd0ca5918563ef2fa947095245d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b9c11ff7035097d437ab28f7e667c1ffc3bfd0ca5918563ef2fa947095245d9.exe
Resource
win10v2004-20221111-en
General
-
Target
8b9c11ff7035097d437ab28f7e667c1ffc3bfd0ca5918563ef2fa947095245d9
-
Size
4.8MB
-
MD5
038a5c86eabd3802e19e3b362f39c3de
-
SHA1
5ece15de90ceef4f10668b8c8e7b0ea209bb9f8f
-
SHA256
8b9c11ff7035097d437ab28f7e667c1ffc3bfd0ca5918563ef2fa947095245d9
-
SHA512
2a07a9bf2c07ae0f6a9ab5eb6dcbe09b8b31810e966b34725e50869d2d31d1007b0c825e121fb40d9d4f5a573af4c36bf5b2b8bb21fb78573d0f84c518772303
-
SSDEEP
98304:PRb5oVjbQHHCc5sYCE33UvFpmZbObmrmCoBjufsKvuLFmtKo:PRybQHicPCE33YTbAmzCfsKvWi
Malware Config
Signatures
Files
-
8b9c11ff7035097d437ab28f7e667c1ffc3bfd0ca5918563ef2fa947095245d9.exe windows x86
b70d588aebc6ba7d4ea02106d092674f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
user32
GetKeyboardType
CreateWindowExA
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
iphlpapi
GetAdaptersInfo
msvcrt
sprintf
setupapi
SetupDiGetClassDevsA
hid
HidD_GetHidGuid
sekeygensdk
SEGenerateKeyBufferA
keygen32
VMProtectFreeSerialNumberMemory
get2012mid
getid
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Sections
CODE Size: 241KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ