Static task
static1
Behavioral task
behavioral1
Sample
8761ab7d688d0c99a00c561dccf8db59f08f93614562e1e6c36886af8e375f4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8761ab7d688d0c99a00c561dccf8db59f08f93614562e1e6c36886af8e375f4a.exe
Resource
win10v2004-20220901-en
General
-
Target
8761ab7d688d0c99a00c561dccf8db59f08f93614562e1e6c36886af8e375f4a
-
Size
491KB
-
MD5
839d9525b47e5e51f82e9e6e1881b740
-
SHA1
229b43902281e3e006ee90c3c5b789f766cbe27a
-
SHA256
8761ab7d688d0c99a00c561dccf8db59f08f93614562e1e6c36886af8e375f4a
-
SHA512
68946ca29758f024c189225657b4e59064af446269dd8ba13ff8e1c03cdfc2613517bafff0b844fe2068150343f61515c7b796e59fca8d7aab5f970fac89383b
-
SSDEEP
6144:l9p9Fdc1lVOrwqlVoxdSq7Hao+8bf4zbtk3kLiO0wnp3sLjVv0ePrJks51cK9kRP:zpvvycq+oZbGQVR1kOGRo6LpcH8
Malware Config
Signatures
Files
-
8761ab7d688d0c99a00c561dccf8db59f08f93614562e1e6c36886af8e375f4a.exe windows x86
049510360ba6247907add08a93bdf33d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowsHookA
ntdll
NtOpenObjectAuditAlarm
kernel32
GetVersion
GetCurrentProcess
GetUserDefaultLCID
GetConsoleSelectionInfo
advapi32
SystemFunction007
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE