Static task
static1
Behavioral task
behavioral1
Sample
c8ff92528afe8d332fc17086809c14e04b793d011be856134fd9e966530eb50f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8ff92528afe8d332fc17086809c14e04b793d011be856134fd9e966530eb50f.exe
Resource
win10v2004-20220812-en
General
-
Target
c8ff92528afe8d332fc17086809c14e04b793d011be856134fd9e966530eb50f
-
Size
131KB
-
MD5
80875b52c1dfe7cfad63db57b9ae4d63
-
SHA1
243d020ae70bc8c0a25b36e75dac2cdf7d0ea978
-
SHA256
c8ff92528afe8d332fc17086809c14e04b793d011be856134fd9e966530eb50f
-
SHA512
e3b2e68aed5814180279763911e759d2486a9c595535d14c36cffb96ceead4bf2fd4e4b53057dc47aae902f326a32d09ddda5e414628461003cc62cced6caf6e
-
SSDEEP
3072:ikZepb7g2mT7xEktsSn90tQqUcAGNWgk4ch7nIDca0Vb:jAf+Xqk+4CFNmnhH
Malware Config
Signatures
Files
-
c8ff92528afe8d332fc17086809c14e04b793d011be856134fd9e966530eb50f.exe windows x86
5cdb313ae15aa809f1c5c991a1a88c41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
GetDriveTypeW
GetLocaleInfoA
RemoveDirectoryA
ResetEvent
DeleteFileA
SetLocalTime
WriteFile
CreateDirectoryA
SetLastError
ReleaseMutex
VirtualProtect
IsBadWritePtr
GetStdHandle
GetModuleHandleA
GetProcessHeap
GetCommandLineA
CancelIo
GetFileAttributesA
CreateMailslotA
ReadConsoleW
user32
PostMessageA
GetCaretPos
DrawIcon
SetCursor
GetWindowTextW
PeekMessageA
DestroyMenu
GetWindowLongW
GetCapture
SetFocus
LoadCursorA
wsprintfA
DispatchMessageA
els
DllGetClassObject
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ