Static task
static1
Behavioral task
behavioral1
Sample
8dee58d2a1427105379cc1b420b8957d7bb45bcd033d19c5a666517bc06c6952.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8dee58d2a1427105379cc1b420b8957d7bb45bcd033d19c5a666517bc06c6952.exe
Resource
win10v2004-20220812-en
General
-
Target
8dee58d2a1427105379cc1b420b8957d7bb45bcd033d19c5a666517bc06c6952
-
Size
63KB
-
MD5
9198e2012cc2265eda6217de1e1a6447
-
SHA1
c53df3337170b3106d9a22dff207dc024cc9d601
-
SHA256
8dee58d2a1427105379cc1b420b8957d7bb45bcd033d19c5a666517bc06c6952
-
SHA512
e4b59774491c9fa3b96fc9bfef0e8a95078470c791f58ad1793f78a8924acffeac6268ae6748b0efe14caffd81a902f50b21f6a97ce8700a609a228a4af9689c
-
SSDEEP
1536:yE87/jpKtNdD0MSZPqUPAD+WaXt/F6nxCZOm:yE87rcavlq5+d0nxCMm
Malware Config
Signatures
Files
-
8dee58d2a1427105379cc1b420b8957d7bb45bcd033d19c5a666517bc06c6952.exe windows x86
6fecd31205e910f0580bfc40ea2212cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
LZOpenFileW
IsWow64Process
SetConsoleIcon
InterlockedPushEntrySList
GetVolumeNameForVolumeMountPointW
GetConsoleAliasesLengthA
GetFirmwareEnvironmentVariableW
GetStringTypeExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE