Static task
static1
Behavioral task
behavioral1
Sample
c8f0db884f11679f43868a05589919da84862f7f928ac200bcd3ada15857249e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8f0db884f11679f43868a05589919da84862f7f928ac200bcd3ada15857249e.exe
Resource
win10v2004-20220812-en
General
-
Target
c8f0db884f11679f43868a05589919da84862f7f928ac200bcd3ada15857249e
-
Size
320KB
-
MD5
a094a800ff6bb2737233ac4c4d3f2f00
-
SHA1
5ca4b3a42ba0eda26bd08f29b54327fd9e4f45f2
-
SHA256
c8f0db884f11679f43868a05589919da84862f7f928ac200bcd3ada15857249e
-
SHA512
d593329f6a221d3bbaa8129d2de447f9cb3afd9e7fa359b8323a57680e961faa6130ec0fe90e7ca76bd0daa9f5494556923946e2c6e5517b608bc0059df02ef7
-
SSDEEP
6144:3IOJxt1tHRvH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:3IOdDJ2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
c8f0db884f11679f43868a05589919da84862f7f928ac200bcd3ada15857249e.exe windows x86
91da23b0131d659147f472b00a882a60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntW
SetConsoleCommandHistoryMode
GetNumberFormatA
EnumDateFormatsExA
DebugBreak
RtlCaptureStackBackTrace
OpenSemaphoreW
GetAtomNameW
FreeLibraryAndExitThread
CreateMailslotA
MoveFileW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE