Static task
static1
Behavioral task
behavioral1
Sample
8395ac2502410342af317f315088558d4d53c792a36790872138bae00cf47f29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8395ac2502410342af317f315088558d4d53c792a36790872138bae00cf47f29.exe
Resource
win10v2004-20220901-en
General
-
Target
8395ac2502410342af317f315088558d4d53c792a36790872138bae00cf47f29
-
Size
439KB
-
MD5
71847da3e538ea3179a44a8b6d43c730
-
SHA1
e8f06765db7ecc288f93b7b54582c4c6d9f3893c
-
SHA256
8395ac2502410342af317f315088558d4d53c792a36790872138bae00cf47f29
-
SHA512
1d35eb8d6d75125b46d2b929331926fab3afcebc6db89c7d710c0781e79ec17ae7c018a7f9758d0c0901c852a00286cb3e5c8083a1b9d637d49ef27e5369a7f8
-
SSDEEP
12288:/NXY2UkOpR8Vq65X7q9XK1RuhNBcQWhyvUGZM8f//ybKd:/12kC8A65X21mRu5vwGlZMbGd
Malware Config
Signatures
Files
-
8395ac2502410342af317f315088558d4d53c792a36790872138bae00cf47f29.exe windows x86
989b52f1da6b79f8190e630ea9e7d68a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKBCodePage
LoadCursorA
ntdll
RtlReadOutOfProcessMemoryStream
ole32
HGLOBAL_UserUnmarshal
oleaut32
VarCyFromDate
kernel32
GetSystemDefaultLCID
GetCommandLineA
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE