Static task
static1
Behavioral task
behavioral1
Sample
8758f60f9d33a34c517ce723b11eada4562476786b2eaf6f8ec1b8599f521e7c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8758f60f9d33a34c517ce723b11eada4562476786b2eaf6f8ec1b8599f521e7c.exe
Resource
win10v2004-20230220-en
General
-
Target
8758f60f9d33a34c517ce723b11eada4562476786b2eaf6f8ec1b8599f521e7c
-
Size
1.8MB
-
MD5
8756b2dbb00747bad79f6778c5a848ba
-
SHA1
d6827d7c8d5bf430dbe508cc91b86d31dbaa44ff
-
SHA256
8758f60f9d33a34c517ce723b11eada4562476786b2eaf6f8ec1b8599f521e7c
-
SHA512
c83c1c5ebf1efe7fd119dd1353db1a0d9ad9f559cd40abb71f37c840bcce99f7e9f877d3826ae4fe77573afcaaf7187753175b01bc64ce6ac7b08d5b17868e20
-
SSDEEP
49152:fZ5/g7GgkVwHn84CegRPZQaNP58y+7YtNB7r+QC6DfseROQGjY:fZ5Y7GxVwHseGBvP58n7ev7r+QCAssGE
Malware Config
Signatures
Files
-
8758f60f9d33a34c517ce723b11eada4562476786b2eaf6f8ec1b8599f521e7c.exe windows x86
ff160957d16df3dba33bb98b0c70170a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHBrowseForFolderW
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
kernel32
FlushFileBuffers
CreateFileA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
WaitForSingleObject
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableW
GetCurrentProcess
GetLastError
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetCommandLineW
GetFileAttributesW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
FormatMessageW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileSize
CreateFileW
SetFilePointer
ResumeThread
WaitForMultipleObjects
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
SetFileAttributesW
GetTempFileNameW
GetLongPathNameW
MoveFileW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetACP
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
user32
DispatchMessageW
IsDialogMessageW
CreateDialogParamW
LoadIconW
SetTimer
TranslateMessage
ScreenToClient
GetMessageW
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
GetDlgItem
EndDialog
GetWindowTextW
SetWindowTextW
KillTimer
EnableWindow
GetActiveWindow
GetDesktopWindow
LoadStringW
IsWindowVisible
PostQuitMessage
gdi32
DeleteObject
CreateSolidBrush
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ