Static task
static1
Behavioral task
behavioral1
Sample
8e55f463da0502a24020f1d1e965d4feeef8c6fd7e1fb15f4eea508bc5baa1c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e55f463da0502a24020f1d1e965d4feeef8c6fd7e1fb15f4eea508bc5baa1c9.exe
Resource
win10v2004-20220812-en
General
-
Target
8e55f463da0502a24020f1d1e965d4feeef8c6fd7e1fb15f4eea508bc5baa1c9
-
Size
15KB
-
MD5
6549595dfc4015db8d946742f32d5fd0
-
SHA1
fa0c3e6a5363ea7ca4b7ba65c93faed4e062b894
-
SHA256
8e55f463da0502a24020f1d1e965d4feeef8c6fd7e1fb15f4eea508bc5baa1c9
-
SHA512
0c4c368ef649175eb6a99e6952c16ec83cc9b4426581926c16f93a03d7f0b7102d9a1c0ef26b536040becad3890a9ad269bfdc311a5c183334351d5821e709d4
-
SSDEEP
192:Udq+jPEVLS1LS6Q0uPw1NMA5NDmErog2psGIzSb7aagYHkn461oy0PsF9LFI5F:7+DEJWQVSfsHIdagYHk461KkF9LFg
Malware Config
Signatures
Files
-
8e55f463da0502a24020f1d1e965d4feeef8c6fd7e1fb15f4eea508bc5baa1c9.exe windows x86
c5b802a6f9c156b9f484119829657d4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5710
ord941
ord939
ord860
ord6648
ord858
ord535
ord537
ord2818
ord690
ord354
ord2393
ord5356
ord5807
ord5204
ord3229
ord389
ord5683
ord6385
ord5207
ord5186
ord665
ord823
ord540
ord5442
ord825
ord1979
ord2784
ord4129
ord533
ord5194
ord5465
ord6927
ord6929
ord922
ord924
ord1997
ord798
ord800
ord1988
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
_endthreadex
strlen
__CxxFrameHandler
atoi
_mbscmp
strcat
memcmp
memset
sprintf
_beginthreadex
kernel32
WaitForSingleObject
GetShortPathNameA
ExpandEnvironmentStringsA
DeleteFileA
CreateProcessA
GetSystemDirectoryA
GetStartupInfoA
CreatePipe
CloseHandle
TerminateProcess
Sleep
GetVolumeInformationA
GetLastError
CreateMutexA
GetPrivateProfileStringA
ReadFile
PeekNamedPipe
GetModuleHandleA
WriteFile
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE