Static task
static1
Behavioral task
behavioral1
Sample
08e8daf833803a11eb86551338e75bbe0f01d6c6ca6f080d501ce957e4284902.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08e8daf833803a11eb86551338e75bbe0f01d6c6ca6f080d501ce957e4284902.exe
Resource
win10v2004-20220901-en
General
-
Target
08e8daf833803a11eb86551338e75bbe0f01d6c6ca6f080d501ce957e4284902
-
Size
171KB
-
MD5
d2ff8c95acaaf31b16b90ad7943f4457
-
SHA1
82f7ef734464e5b2f0fdb19ac064ba3fa63890a7
-
SHA256
08e8daf833803a11eb86551338e75bbe0f01d6c6ca6f080d501ce957e4284902
-
SHA512
6ac50958606b8bd1e96505173596e9516523374821921e3868031c395599a42e5ca9a1f4288d57d6b93552cc465905974f41e529644a7b0f45db859bd98a1b64
-
SSDEEP
3072:f5Z7gQnxkn9J01D9Vw4c3JOzs3iAWYHZige+lGZ0dh2MsxtIzcBCCBClnohAh:xhTenWnw4c3JOzs3PW1BUhMjUCAtNh
Malware Config
Signatures
Files
-
08e8daf833803a11eb86551338e75bbe0f01d6c6ca6f080d501ce957e4284902.exe windows x86
ade0ddab9fefebaf74fbcfeb1d3cb516
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
GetProcessShutdownParameters
CreateThread
GetGeoInfoA
TransmitCommChar
GetSystemTimeAdjustment
VerifyConsoleIoHandle
SetCommTimeouts
LoadLibraryExW
CreateNamedPipeW
SetConsoleInputExeNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 157KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE