Static task
static1
Behavioral task
behavioral1
Sample
f8bd9a3a5c51118ffa0d5cf2bba99855dd4b77d510015a8633c0a80985eda813.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f8bd9a3a5c51118ffa0d5cf2bba99855dd4b77d510015a8633c0a80985eda813.exe
Resource
win10v2004-20220812-en
General
-
Target
f8bd9a3a5c51118ffa0d5cf2bba99855dd4b77d510015a8633c0a80985eda813
-
Size
85KB
-
MD5
0af270ad0479cfe9cb706dfdb2bfd650
-
SHA1
750aed6499bb4f5554ccb647724c1a98043f979d
-
SHA256
f8bd9a3a5c51118ffa0d5cf2bba99855dd4b77d510015a8633c0a80985eda813
-
SHA512
99a30d488d22becf544a0e2f8507002d1520a4036883b8c3ae54d1f5b7b225140b6f64d6d587d0258ede0ca461e124416a63ef4bd9db0979d04217ee223965ca
-
SSDEEP
1536:GtaxY+4iMCO6Q8n5X2BAbNOxOJS9TXCJcZlnC+QooqvkzthLQ1AO+CS1EFWd:GtKY4aYsibNOEJ0TlZlUooqviLQ11+Cg
Malware Config
Signatures
Files
-
f8bd9a3a5c51118ffa0d5cf2bba99855dd4b77d510015a8633c0a80985eda813.exe windows x86
36caa7cf9a59344def17600b79475783
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
DosPathToSessionPathW
QueryDepthSList
ExpungeConsoleCommandHistoryA
TransactNamedPipe
WriteConsoleInputVDMA
LCMapStringW
GlobalAddAtomA
FlsFree
EnumTimeFormatsW
BaseCheckAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 70KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE