Static task
static1
Behavioral task
behavioral1
Sample
8b37897f9d0a3cc6b6906aa6c4d8356840060f0500484d8531a94a8051dd516b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b37897f9d0a3cc6b6906aa6c4d8356840060f0500484d8531a94a8051dd516b.exe
Resource
win10v2004-20220812-en
General
-
Target
8b37897f9d0a3cc6b6906aa6c4d8356840060f0500484d8531a94a8051dd516b
-
Size
350KB
-
MD5
6ed2442702c4e5a5735860a19a512044
-
SHA1
875faa92f00416c7ca9195d966883d2d998711a3
-
SHA256
8b37897f9d0a3cc6b6906aa6c4d8356840060f0500484d8531a94a8051dd516b
-
SHA512
87603b932b8217c2e096ecbfab01fe955eb52ad6fcd118651c31e89bc883d9fecddb572e8ae0425e247041559e834c259e564988a7ae66263f89b58d3778efd7
-
SSDEEP
6144:vS32f0q5YRpqrzaKG6qsZNh/+EzFnCyPlM3D5ZA+Ere2qPER9npIK4Z9y11:vS385YbqyKxqsZPGuXPlkC+L/8npR4Zk
Malware Config
Signatures
Files
-
8b37897f9d0a3cc6b6906aa6c4d8356840060f0500484d8531a94a8051dd516b.exe windows x86
74015f6c29ff6772ec691203f675db41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
traffic
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcSetFlowA
TcSetFlowA
kernel32
VirtualAllocEx
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetThreadTimes
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
GetComputerNameA
CreatePipe
DuplicateHandle
VirtualQuery
GlobalFree
IsValidCodePage
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetTimeZoneInformation
TerminateProcess
GetSystemTime
GetProcessHeap
FindNextFileA
FoldStringA
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
Sections
.text Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 626KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE