Static task
static1
Behavioral task
behavioral1
Sample
8ac80f03f744f5c90dc02366d99b94c29d21d2737fd1b9560d4249d776cb8b33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ac80f03f744f5c90dc02366d99b94c29d21d2737fd1b9560d4249d776cb8b33.exe
Resource
win10v2004-20220812-en
General
-
Target
8ac80f03f744f5c90dc02366d99b94c29d21d2737fd1b9560d4249d776cb8b33
-
Size
9KB
-
MD5
fb1f01101c0d444f79b2684ba2d81288
-
SHA1
dd62476b3d63da7868c692c433d4d0a00843d542
-
SHA256
8ac80f03f744f5c90dc02366d99b94c29d21d2737fd1b9560d4249d776cb8b33
-
SHA512
e3920966117cdbdeeab7c332bfda65407c5e5e0bef73c79e713ffcd81c75d248e929db0981fa17c74a194e966fd915f72289335726ea915be78b8e637dd12af6
-
SSDEEP
192:hLiRe5b9ROZ//lSLxZz54jOJI5TAfr7E5pz6ITVhO:Aw5bk//ADujcj7c
Malware Config
Signatures
Files
-
8ac80f03f744f5c90dc02366d99b94c29d21d2737fd1b9560d4249d776cb8b33.exe windows x86
8409b9298d76dfc9e5d44e2348a524f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lava_utils
?load_library@@YAPAUlava_library@@PBD@Z
?lava_log4@@YAXPBDW4LogLevel@@0ZZ
?find_symbol@@YAPAXPAUlava_library@@PBD@Z
vulcan_core
?server_run@core@vulcan@@YAX_N@Z
?init_local_bus@core@vulcan@@YA_NPBDP6AXXZ@Z
?clear_local_bus@core@vulcan@@YAXXZ
vcruntime140
memset
__current_exception_context
__current_exception
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
_initterm_e
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_initialize_narrow_environment
__p___argc
_exit
_initterm
_get_initial_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
kernel32
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceCounter
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ