Static task
static1
Behavioral task
behavioral1
Sample
f8532a022e6a89c3048161f8df3a524238ea1024c4af292bb8717b4b5b4edab9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f8532a022e6a89c3048161f8df3a524238ea1024c4af292bb8717b4b5b4edab9.exe
Resource
win10v2004-20220901-en
General
-
Target
f8532a022e6a89c3048161f8df3a524238ea1024c4af292bb8717b4b5b4edab9
-
Size
66KB
-
MD5
60bbe51c2d2710d0f368dff8236aea67
-
SHA1
215af671205c47511a455f97bafa003fa8cbc607
-
SHA256
f8532a022e6a89c3048161f8df3a524238ea1024c4af292bb8717b4b5b4edab9
-
SHA512
62aac09e9e45ed6654b5b9e90fdbc8bdab67a12a6478490789e6a8b1b76efe0613476ae0b8333ea979f5d11be9fb300909d6afb309e3dae6bc4a420530865459
-
SSDEEP
1536:r4PtV12u+mFdRoeQPAzi1cuSgb0su2YywEH:r4PP1ZqeQCOvb02Bw
Malware Config
Signatures
Files
-
f8532a022e6a89c3048161f8df3a524238ea1024c4af292bb8717b4b5b4edab9.exe windows x86
9c08b925766b635eefea7ae0c32c5ba4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
DeleteFileA
Heap32First
GetConsoleAliasA
GetConsoleTitleA
SetEndOfFile
SetCurrentDirectoryA
CreateFileMappingW
GetStringTypeW
LoadLibraryA
WriteConsoleW
GetShortPathNameW
SetEnvironmentVariableA
DeleteFileA
SetFilePointer
SetVolumeLabelW
CreateMailslotA
Heap32Next
GetProcessHeap
VirtualAlloc
GetACP
DeleteFileA
GetModuleHandleW
msoeacct
DllCanUnloadNow
GetDllMajorVersion
ValidEmailAddress
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE