Static task
static1
Behavioral task
behavioral1
Sample
f8da988ffdf7cbf1957e383a9c10ae6a3367dfbf0c87980f87f80cd63c42f990.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8da988ffdf7cbf1957e383a9c10ae6a3367dfbf0c87980f87f80cd63c42f990.exe
Resource
win10v2004-20220901-en
General
-
Target
f8da988ffdf7cbf1957e383a9c10ae6a3367dfbf0c87980f87f80cd63c42f990
-
Size
320KB
-
MD5
a1b6049f143d9fca7b09eb14b6886830
-
SHA1
30ca8a5bea7917299adedc47de8a3fc49324cc3c
-
SHA256
f8da988ffdf7cbf1957e383a9c10ae6a3367dfbf0c87980f87f80cd63c42f990
-
SHA512
90b6e3eb08c7da630a633272369cb113695fc5a25e421ce60d1ddf6dafb8eff1a7cac9c405c71e75f4c125923cf621a2272e60fed3c72a119021510d9f3944bb
-
SSDEEP
6144:y5mvdCNxfb0H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:LvCfO2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
f8da988ffdf7cbf1957e383a9c10ae6a3367dfbf0c87980f87f80cd63c42f990.exe windows x86
0a289f0344ffecf6f7add0c725605c7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
BaseDumpAppcompatCache
CreateMailslotA
FindFirstFileExA
PrepareTape
ExtendVirtualBuffer
GetSystemWindowsDirectoryW
UnregisterWait
GetFileAttributesExA
FormatMessageW
GetCurrentActCtx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE