Static task
static1
Behavioral task
behavioral1
Sample
8f7231d8154bac31f7b6fa02d6b4e913e71022aa9d0821d660c8b7925d26c4d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f7231d8154bac31f7b6fa02d6b4e913e71022aa9d0821d660c8b7925d26c4d4.exe
Resource
win10v2004-20220812-en
General
-
Target
8f7231d8154bac31f7b6fa02d6b4e913e71022aa9d0821d660c8b7925d26c4d4
-
Size
1.1MB
-
MD5
2d791601818670ec7729992c9c042d40
-
SHA1
387531b9cd585e3edd8c7d371a2ed82cab78d5e8
-
SHA256
8f7231d8154bac31f7b6fa02d6b4e913e71022aa9d0821d660c8b7925d26c4d4
-
SHA512
abd0e2e77b6a8956d56d1cbaf90199a2cc890566b1e145de7d048e4378ab33849cc94c2841518402f394755dbeaeaf852bee90489d50c41a1ef7352c9e52c056
-
SSDEEP
12288:HRiVIA2xPhbWhunAbv2DsS7Binz3dq5HzInE4aqFRukahht/6FavKM8wvaCb:HRiV92xPpAbQuz3d8TYLa44LL7HaS
Malware Config
Signatures
Files
-
8f7231d8154bac31f7b6fa02d6b4e913e71022aa9d0821d660c8b7925d26c4d4.exe windows x86
9a2fae413f4db3215b13f8f8b9f8b8a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memmove
strncmp
??3@YAXPAX@Z
strncpy
_strnicmp
kernel32
ExitProcess
GetTempPathA
GetTempFileNameA
IsBadReadPtr
HeapFree
GetModuleHandleA
FindResourceA
SizeofResource
LoadResource
CreateFileA
LockResource
WriteFile
CloseHandle
GetProcessHeap
HeapReAlloc
HeapAlloc
shell32
ShellExecuteA
user32
wsprintfA
MessageBoxA
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 730B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE