Static task
static1
Behavioral task
behavioral1
Sample
8a0f04554ce0e95d2bd5b3649940a47423216d3197068bc04e3d1b354cab1783.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a0f04554ce0e95d2bd5b3649940a47423216d3197068bc04e3d1b354cab1783.exe
Resource
win10v2004-20220901-en
General
-
Target
8a0f04554ce0e95d2bd5b3649940a47423216d3197068bc04e3d1b354cab1783
-
Size
56KB
-
MD5
9179162b297917ff312b879bc6b7b410
-
SHA1
9b7fc1c2418c32f1c0aae4165152f0278b17487b
-
SHA256
8a0f04554ce0e95d2bd5b3649940a47423216d3197068bc04e3d1b354cab1783
-
SHA512
e01c77ca105310059ed6f9487cf7feb6e8ffbc431371abd648e1e155f5a958a789847d2a21fcb57bc13f3457cc965045e62901226da4866d7d5464bf15a9b483
-
SSDEEP
768:uEGEtSBiGsCO/e1wAd8o16AmxunNCamCgl4aNbnH8d0cIycgnJmf10uHj98WIx0e:2aSkCO/MdzjC+64SQ0GYBHjWWtLNti
Malware Config
Signatures
Files
-
8a0f04554ce0e95d2bd5b3649940a47423216d3197068bc04e3d1b354cab1783.exe windows x86
66f39728bc556d31439cc6f6ecadd16c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReplaceFile
EnumLanguageGroupLocalesW
CreateWaitableTimerA
HeapDestroy
Thread32First
SetFileValidData
CreateActCtxA
GetConsoleAliasesA
CreateFiberEx
SetConsoleCtrlHandler
TrimVirtualBuffer
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE