Static task
static1
Behavioral task
behavioral1
Sample
8c31209058141a53d58c645b24515644ea0812f748f707d5a48946082b0f9b6a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8c31209058141a53d58c645b24515644ea0812f748f707d5a48946082b0f9b6a.exe
Resource
win10v2004-20220901-en
General
-
Target
8c31209058141a53d58c645b24515644ea0812f748f707d5a48946082b0f9b6a
-
Size
832KB
-
MD5
7072029f92085cd07a24a46fc36571f0
-
SHA1
f58d7acf10cba952485519ccda0e4c475159280f
-
SHA256
8c31209058141a53d58c645b24515644ea0812f748f707d5a48946082b0f9b6a
-
SHA512
390f6d2aa6fc4dba2032438e821a8994f5ca4a5b5f259e15609c3388bb1f663f0a6f5d6eed027728ca60e68729646246289890b1694fc6c616a8691374fa1015
-
SSDEEP
12288:2I1AATwFtrt9iPtVhfZM2TnS/tI24zC+xiUTUoUs9NIePXGh0aKisP3ngLRmq2:2nAEYPtz6anUD4mRUTUWNW0Ksf8Rmq2
Malware Config
Signatures
Files
-
8c31209058141a53d58c645b24515644ea0812f748f707d5a48946082b0f9b6a.exe windows x86
370e9b258cebec7a3f7c1fb8241cf288
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
GetDiskFreeSpaceA
GetModuleHandleA
GetEnvironmentStringsW
SearchPathW
CompareStringA
GetDriveTypeA
MoveFileExW
GetProcessVersion
GetBinaryTypeW
CreateDirectoryA
WriteConsoleA
GetFullPathNameW
CopyFileA
ReadConsoleA
HeapCreate
FreeEnvironmentStringsA
msdart
mpFree
MpHeapSize
??0CEXAutoBackupFile@@QAE@PBG@Z
mpMalloc
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 813KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ