Static task
static1
Behavioral task
behavioral1
Sample
8ed2bd3a30f0ff871c9f0c23de0a9e91fec155f0dd87abf52741fabaefc150a7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8ed2bd3a30f0ff871c9f0c23de0a9e91fec155f0dd87abf52741fabaefc150a7.exe
Resource
win10v2004-20220901-en
General
-
Target
8ed2bd3a30f0ff871c9f0c23de0a9e91fec155f0dd87abf52741fabaefc150a7
-
Size
72KB
-
MD5
0aa846b43f021e65f41978f3353f8b41
-
SHA1
4518c53611bbb0cebaf96ef36dfb258e62bfe19f
-
SHA256
8ed2bd3a30f0ff871c9f0c23de0a9e91fec155f0dd87abf52741fabaefc150a7
-
SHA512
b5f134bcbde3126130f25964459678a1a0a315f3d888d41daff1ca7b71a14ceeeba747f35537808ce9763d63e25fb976cd76b512c7494cb7bc56db06d0d1d271
-
SSDEEP
768:MW/c4qsfNB26ftYSDfjaj4NZtiZCKgca3ouXXmIYXOhYWhFGsZDpZy/bbDXNoPX:MG3jfjatZCtca4iXm4hFGKDpI/XZoPX
Malware Config
Signatures
Files
-
8ed2bd3a30f0ff871c9f0c23de0a9e91fec155f0dd87abf52741fabaefc150a7.exe windows x86
c7ddfbda78b7886f9197b1fc8adcb451
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
VirtualAlloc
LoadLibraryA
VirtualFree
VirtualProtect
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
lstrcmpiA
GetProcAddress
GetModuleHandleA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetStringTypeW
user32
GetSystemMetrics
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ