Static task
static1
Behavioral task
behavioral1
Sample
8635128e7cfefb2e231f34686200319671b13c6b9af73f259f857a398ade1ed7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8635128e7cfefb2e231f34686200319671b13c6b9af73f259f857a398ade1ed7.exe
Resource
win10v2004-20220901-en
General
-
Target
8635128e7cfefb2e231f34686200319671b13c6b9af73f259f857a398ade1ed7
-
Size
176KB
-
MD5
8309b2b78cacd81312d9348313726f93
-
SHA1
6aedd4ca752bdbc6f3a6c2a0c60122ab2a38d8ba
-
SHA256
8635128e7cfefb2e231f34686200319671b13c6b9af73f259f857a398ade1ed7
-
SHA512
a702d3c62d45e0ff0ca830663c74ec0dd5ced4cb9dfa1ef0fb19c811a4e520b9370aa337c75a38deba1e97f5639899af475d92570274243c3c0beb405e064276
-
SSDEEP
3072:C0XxSoQpXQov7UWld2eyf7RJUvVB75JIdkT2G3xy:Ci9EXQo4beyjROkdkTJ
Malware Config
Signatures
Files
-
8635128e7cfefb2e231f34686200319671b13c6b9af73f259f857a398ade1ed7.exe windows x86
3cc2dedc29119857a606fe971961e69c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
kernel32
HeapSize
EnumSystemLocalesA
LeaveCriticalSection
GetCPInfoExA
RtlUnwind
GetCurrentThreadId
IsValidCodePage
GetVersionExA
GetUserDefaultLCID
GetLastError
WriteConsoleA
EnterCriticalSection
EnumResourceNamesA
CreateFileA
GetLocaleInfoW
RaiseException
InterlockedDecrement
RaiseException
SetStdHandle
Sleep
InitializeCriticalSection
DeleteCriticalSection
IsValidLocale
InterlockedIncrement
GetConsoleOutputCP
WriteConsoleW
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ