Static task
static1
Behavioral task
behavioral1
Sample
8b2f429e6fee90967bb709a53bc508820ed264d4f9ec7319b127ff2456755827.exe
Resource
win10v2004-20221111-en
General
-
Target
8b2f429e6fee90967bb709a53bc508820ed264d4f9ec7319b127ff2456755827
-
Size
3.8MB
-
MD5
bfc182abd10fc50d20d096ab105eee4b
-
SHA1
c96c44598877b76281ff028d8b05099d6c152123
-
SHA256
8b2f429e6fee90967bb709a53bc508820ed264d4f9ec7319b127ff2456755827
-
SHA512
55e00da7dee9fd31e490fcbdae12dd968f2a3a96967f1a0103ee92ee85b5af7409285a60c811b10e5eb129d033b2f43831fea214b095179044ad6d137efd3dff
-
SSDEEP
98304:3cQdauMEOtGzbwq7pGjmNF4ttfK7JbnfEdTrwlDrJ:3DathtGzbwq4jm83AlnfEdHwlv
Malware Config
Signatures
Files
-
8b2f429e6fee90967bb709a53bc508820ed264d4f9ec7319b127ff2456755827.exe windows x86
2874bda093b03f6d6f8f1371fcfc37a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetCurrentProcess
GetComputerNameW
GetTickCount
GetNumberFormatA
LoadLibraryW
GetPrivateProfileStructW
GetGeoInfoA
GetBinaryTypeW
GetTempPathW
LCMapStringA
OpenMutexW
GetLastError
WriteConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
GetProcessWorkingSetSize
LocalAlloc
AddAtomW
SetCommMask
FoldStringA
GetModuleHandleA
BuildCommDCBA
ReadConsoleInputW
GetNumaProcessorNode
SetLastError
SetLocaleInfoA
LCMapStringW
GetStringTypeW
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
user32
LoadMenuA
GetListBoxInfo
advapi32
ReportEventA
BackupEventLogW
winhttp
WinHttpCheckPlatform
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.5MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bemaxa Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cewol Size: 1024B - Virtual size: 723B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ