Static task
static1
Behavioral task
behavioral1
Sample
8591271985c7c6e5ca6dc0a23be4332c221b766d1d3f720b5da08e02e901c85c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8591271985c7c6e5ca6dc0a23be4332c221b766d1d3f720b5da08e02e901c85c.exe
Resource
win10v2004-20220901-en
General
-
Target
8591271985c7c6e5ca6dc0a23be4332c221b766d1d3f720b5da08e02e901c85c
-
Size
8KB
-
MD5
613bb08858bbe5ef195d9a1e5b3d1220
-
SHA1
c0b2c77b8c391478b3e7ec2ea4970dc0f2a67250
-
SHA256
8591271985c7c6e5ca6dc0a23be4332c221b766d1d3f720b5da08e02e901c85c
-
SHA512
cf5edbee52221e6e28c2a066b24331fdf24aa8095f3e68f6d23b85f12a51b218d9bd9e46d18b0812726a96bce3d35c185242e316f74a2857619813d9eeb5a1f8
-
SSDEEP
96:SKBLnD6vAnohJfyV7nS62sQC4o4fOYyTSzm9izZp43Z9NA:SKBTD6onobfyV7SM4o4feeEEZpaHA
Malware Config
Signatures
Files
-
8591271985c7c6e5ca6dc0a23be4332c221b766d1d3f720b5da08e02e901c85c.exe windows x86
66b18ad74eb7db9d498d7ab6c08faba7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA
user32
LoadStringA
wsprintfA
shlwapi
StrToIntA
msvcrt
strcat
strlen
malloc
_strlwr
strcpy
strcmp
Sections
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ