Static task
static1
Behavioral task
behavioral1
Sample
8dd0da060936419b2141a231850ec21d7e4367b4e8bdf2b2dba962d25f184575.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8dd0da060936419b2141a231850ec21d7e4367b4e8bdf2b2dba962d25f184575.exe
Resource
win10v2004-20220812-en
General
-
Target
8dd0da060936419b2141a231850ec21d7e4367b4e8bdf2b2dba962d25f184575
-
Size
226KB
-
MD5
8404e4809b20bdb830d70a44c0ed3a80
-
SHA1
2f2638856d6a1edf94a7eb740633aa2c5ac2784a
-
SHA256
8dd0da060936419b2141a231850ec21d7e4367b4e8bdf2b2dba962d25f184575
-
SHA512
276602b90fc68f40c971ddc2ae75b85b4d910792f5a9828a51bc39f300b851dabceaf67dbc239d60085af13d7109d5ecd775eb02d825a5b39ff5062d7f602a31
-
SSDEEP
6144:UYrFQ+Y0hS2fWTgoZ95f81gcvjQwvmrlRxDKrhsQ/r:RQOhbfWNClBeTBYsQ/r
Malware Config
Signatures
Files
-
8dd0da060936419b2141a231850ec21d7e4367b4e8bdf2b2dba962d25f184575.exe windows x86
051afb6cf499ab9e81752563f4f00347
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeaps
GetFileAttributesExA
WriteFile
GetCommandLineA
GetACP
GetSystemTimeAdjustment
GetCurrentProcess
SetEvent
TlsFree
InitializeCriticalSection
GetPrivateProfileIntA
IsProcessorFeaturePresent
SignalObjectAndWait
LockFile
GetVersion
VirtualAlloc
LockFileEx
FlushFileBuffers
GetTempFileNameA
GetProcAddress
LoadLibraryA
Sleep
SetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
ExitProcess
GetCPInfo
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
HeapReAlloc
GetOEMCP
LCMapStringA
LCMapStringW
Sections
.text Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ