Static task
static1
Behavioral task
behavioral1
Sample
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe
Resource
win10v2004-20230220-en
General
-
Target
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7
-
Size
1.5MB
-
MD5
2ed626e35ec451c64460382bec228089
-
SHA1
8d5f66b8c328ff1eef098146ef65fa4cc2f7119d
-
SHA256
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7
-
SHA512
3084fed70d0b0daee399d6e60e09a35d580485cbf264a56374211b3c24e5a491a9c24e46a704a19c0de641512212885fbad1283667024863486d881df6f86d71
-
SSDEEP
24576:6WxQJhTL+k287vRwEZ8/1Uv+4rzZqTu4n1+LXaTTU9AjAllPY4fF37XkeOm3QH66:lcTykBjZutUv/4uHLKTT/IhkgQaQnY
Malware Config
Signatures
Files
-
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe windows x86
a4f88ea9d9686a1732a4d45cd1bf8aad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetProcessImageFileNameA
kernel32
GetVersionExW
InitializeCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
FindWindowW
gdi32
SetDIBitsToDevice
comdlg32
GetSaveFileNameW
advapi32
RegCloseKey
shell32
DragFinish
ole32
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
ws2_32
WSAGetLastError
iphlpapi
GetAdaptersInfo
wininet
InternetOpenA
Sections
.text Size: - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.beta0 Size: - Virtual size: 1014KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.beta1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ