Static task
static1
Behavioral task
behavioral1
Sample
8848db06cdcfdc7cd8a30b2a3decff74541e7cda1b896c22139b27bef5f49332.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8848db06cdcfdc7cd8a30b2a3decff74541e7cda1b896c22139b27bef5f49332.exe
Resource
win10v2004-20220812-en
General
-
Target
8848db06cdcfdc7cd8a30b2a3decff74541e7cda1b896c22139b27bef5f49332
-
Size
725KB
-
MD5
81c5f72de54f98bde9dfcd30eba351e0
-
SHA1
4c77a86273340efabe9f0d6c79b94ca2f471efd7
-
SHA256
8848db06cdcfdc7cd8a30b2a3decff74541e7cda1b896c22139b27bef5f49332
-
SHA512
6f38cb33c7495a05c8e9618fc8f9b54ca69593f950d0b6a58e3020e82389f1fe6fcc0fa24f745f7739972c055f2b901cf31def8f68ad3fa2968804cb264de61f
-
SSDEEP
12288:mGN7Hffi9Mr8KVCipjSW4pfihlIewfA43UfnAihGSv7aNCB6gm:3F/K9MrBHWW4pQIeGJEfnAikhAy
Malware Config
Signatures
Files
-
8848db06cdcfdc7cd8a30b2a3decff74541e7cda1b896c22139b27bef5f49332.exe windows x86
a68514993881296991e06125a35b7b7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetEntriesInAclW
kernel32
GetProcessHeap
GetSystemTime
ntdll
NtQueryPerformanceCounter
ZwCreateEventPair
RtlAddAccessAllowedObjectAce
ZwCancelTimer
oleaut32
VarFormatDateTime
user32
GetDoubleClickTime
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE