Static task
static1
Behavioral task
behavioral1
Sample
f8f8b5a02bd7a923f3a12a3758e46471b3ebeb6fc5d08500ed716ad0c44fe0f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8f8b5a02bd7a923f3a12a3758e46471b3ebeb6fc5d08500ed716ad0c44fe0f0.exe
Resource
win10v2004-20220812-en
General
-
Target
f8f8b5a02bd7a923f3a12a3758e46471b3ebeb6fc5d08500ed716ad0c44fe0f0
-
Size
507KB
-
MD5
07b600dfcbe522705229dc7cbc5a4520
-
SHA1
79610d03925a4a6a94791a804604b30617fd34d9
-
SHA256
f8f8b5a02bd7a923f3a12a3758e46471b3ebeb6fc5d08500ed716ad0c44fe0f0
-
SHA512
45c87ccc9cd6cd851132ace7481df2f8adab2a0d24dff868d6d78b720597be0748aee4af2fd85a3d76d12ad62c78f6a4d76028a5299b2801deef4d625bfb987d
-
SSDEEP
12288:JbYTPm2mD9eoEZE34CNLMpPuFsMSQdMBXhlnIA:Gi34CNLMpmH+xlIA
Malware Config
Signatures
Files
-
f8f8b5a02bd7a923f3a12a3758e46471b3ebeb6fc5d08500ed716ad0c44fe0f0.exe windows x86
2169482e6b1e1574139b5c1e2b08e11f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LsaFreeMemory
CancelOverlappedAccess
user32
DlgDirListComboBoxA
oleaut32
BstrFromVector
kernel32
GetCommandLineW
GetConsoleWindow
Sections
.text Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 294B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE