Static task
static1
Behavioral task
behavioral1
Sample
08fa923be7068f3741e67dfd36cd55316450cc5da1cd00cbd693c77afec4b802.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08fa923be7068f3741e67dfd36cd55316450cc5da1cd00cbd693c77afec4b802.exe
Resource
win10v2004-20220812-en
General
-
Target
08fa923be7068f3741e67dfd36cd55316450cc5da1cd00cbd693c77afec4b802
-
Size
83KB
-
MD5
7152b5a3e43e5a5f858318e7dcb4baa2
-
SHA1
9a20d02e9d82db80424f1f730727d4c9338274d0
-
SHA256
08fa923be7068f3741e67dfd36cd55316450cc5da1cd00cbd693c77afec4b802
-
SHA512
8072fbd46ac9f94d634575d8b51b090226c33d911216a7c09a4ae64ef02b0ac8eeeea88e6199131fb30efcedfbd63e54c9e0eb13a0b2bf2a2fd6b30c2481e928
-
SSDEEP
1536:LlwwwaCqKgTvapTmtMsEpv9c8u20D+5bkRMa27Il5pjVrs2ryrd1vUQuqwcizSkX:Llwwwa7KgDxKr9cdbRN225Hs2quciu
Malware Config
Signatures
Files
-
08fa923be7068f3741e67dfd36cd55316450cc5da1cd00cbd693c77afec4b802.exe windows x86
f6abc57bcd41f78409e059876c5b90a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeMountPointW
ReadFile
SetThreadExecutionState
ReadFileEx
RegisterConsoleIME
_lread
WaitForMultipleObjects
PrivCopyFileExW
GetVolumeNameForVolumeMountPointW
BaseCleanupAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE