Static task
static1
Behavioral task
behavioral1
Sample
d8a4af7b7975c5142670a33e1bc9ac28780ccfe3515956ca43711c6851d301f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8a4af7b7975c5142670a33e1bc9ac28780ccfe3515956ca43711c6851d301f8.exe
Resource
win10v2004-20220901-en
General
-
Target
d8a4af7b7975c5142670a33e1bc9ac28780ccfe3515956ca43711c6851d301f8
-
Size
442KB
-
MD5
748c122126b02e8fa7c4bbba1c4d0160
-
SHA1
d7af0e27343e9a7b3d75f2ce14c5d4389f11b152
-
SHA256
d8a4af7b7975c5142670a33e1bc9ac28780ccfe3515956ca43711c6851d301f8
-
SHA512
9f428844c0a79d5e392a9328e0dbe931fe0bc8bf88cbe3ff49f972058bea4eafcfaa1e0ea743ad4a7ffea5d445f4c88b137d9d4c6a0b703f49eb7ca811e20e9e
-
SSDEEP
12288:u981RxjHknjZLX4zh9Uy2qDk1M/RmlfRwP:u981RcjdX4zhedqDk1WCu
Malware Config
Signatures
Files
-
d8a4af7b7975c5142670a33e1bc9ac28780ccfe3515956ca43711c6851d301f8.exe windows x86
4c3a653cbfdb69c11a57360c7a9842f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtFsControlFile
kernel32
GetProcessHeap
CreateActCtxW
GetCurrentThread
user32
GetKBCodePage
Sections
.text Size: 435KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE