Static task
static1
Behavioral task
behavioral1
Sample
f8ebe873bf6bd57464ee8a703930435c9c17bf8b986d8a1e5f266e290f5139f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8ebe873bf6bd57464ee8a703930435c9c17bf8b986d8a1e5f266e290f5139f4.exe
Resource
win10v2004-20220812-en
General
-
Target
f8ebe873bf6bd57464ee8a703930435c9c17bf8b986d8a1e5f266e290f5139f4
-
Size
108KB
-
MD5
7361572286fafc5fefa8fc875d1e8156
-
SHA1
b0031d4ca5ff00e172f97a3a5ff29d86d7d7f455
-
SHA256
f8ebe873bf6bd57464ee8a703930435c9c17bf8b986d8a1e5f266e290f5139f4
-
SHA512
d5e44c1e62514f673f7042b96e5b9558e1bc6180b381171bdf1949638efad9a3f2b22cfed4da2a468470b3f15023af49d48312856e36cdcff614007c15500c3f
-
SSDEEP
3072:llXkKNXlrWTPXeiG8oDvZMZcDRad6ZCNTkT:ll91qfDoD+Z5d6ZCNYT
Malware Config
Signatures
Files
-
f8ebe873bf6bd57464ee8a703930435c9c17bf8b986d8a1e5f266e290f5139f4.exe windows x86
3c07795106ae833d0261affdb987237e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
SetFileAttributesW
GetFileAttributesA
GetSystemTimeAsFileTime
GetTempPathA
GetProcAddress
GetModuleFileNameW
FreeEnvironmentStringsW
VirtualProtect
GetThreadLocale
WriteConsoleA
GetStartupInfoA
GetEnvironmentVariableA
CreateFileMappingA
GetCurrentThread
OpenProcess
FlushFileBuffers
RtlMoveMemory
GetModuleHandleA
LoadResource
GetTempPathW
GetACP
SizeofResource
DeleteFileA
msvcrt
_exit
tan
_adjust_fdiv
_controlfp
__getmainargs
__p___initenv
_except_handler3
__p__fmode
__set_app_type
__p__commode
_initterm
_XcptFilter
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ryy Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ