Static task
static1
Behavioral task
behavioral1
Sample
8ea35df47e223fdd1a3ab0541de822c200a49bf2728f10b26fa7279eb6935973.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8ea35df47e223fdd1a3ab0541de822c200a49bf2728f10b26fa7279eb6935973.exe
Resource
win10v2004-20220812-en
General
-
Target
8ea35df47e223fdd1a3ab0541de822c200a49bf2728f10b26fa7279eb6935973
-
Size
58KB
-
MD5
6d5c084d2b5f893764d0fb8f40e9d640
-
SHA1
11c4b9098de324f2ea0a6af9a1e426e119961886
-
SHA256
8ea35df47e223fdd1a3ab0541de822c200a49bf2728f10b26fa7279eb6935973
-
SHA512
21a1b8e78e4b471188554245b8e25308b2bdb3629642b5fd607738ce2c676471224b7e6ad8c14af05a643e191759835945866b4174126855442e7049b22d7143
-
SSDEEP
1536:tYGJR8n2DRYWNXW4f3ORW/4ZVgaL7NaWJ/olwv:tXfEUWHBP
Malware Config
Signatures
Files
-
8ea35df47e223fdd1a3ab0541de822c200a49bf2728f10b26fa7279eb6935973.exe windows x86
99b192703d8c9b325bab451478e541e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetConsoleAliasW
TlsGetValue
LocalFree
GetPrivateProfileStringW
ResumeThread
HeapCreate
EnterCriticalSection
FindClose
GetNumberFormatW
GetCurrentProcessId
GetModuleHandleA
EnumCalendarInfoW
GetCurrentThreadId
SetLastError
ReadFile
lstrlenW
FindAtomW
GetDriveTypeW
SetEvent
user32
GetClientRect
GetKeyboardType
GetMenuInfo
DispatchMessageA
DispatchMessageA
DrawTextW
GetClassInfoA
SetFocus
IsWindow
GetCursorInfo
GetSysColor
CallWindowProcW
GetKeyState
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ