Static task
static1
Behavioral task
behavioral1
Sample
8b886de3d9a40e52844ed7f5d87200d0f25851dc620de9b1e7db4329dc620289.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b886de3d9a40e52844ed7f5d87200d0f25851dc620de9b1e7db4329dc620289.exe
Resource
win10v2004-20220812-en
General
-
Target
8b886de3d9a40e52844ed7f5d87200d0f25851dc620de9b1e7db4329dc620289
-
Size
303KB
-
MD5
82cd1675a648ddbd5fd1b9afa0967200
-
SHA1
cf79e631ece7faef261a94465e5c9238c7a794d3
-
SHA256
8b886de3d9a40e52844ed7f5d87200d0f25851dc620de9b1e7db4329dc620289
-
SHA512
7343c09beb31e256a31df00be70279fb3163bcb9557fe229fab8d4882a8d3e0db2d8236658fcd976925a279c24fb711a005f425cb28b36ed576aa455b77e3a06
-
SSDEEP
6144:p8nCD7ts/4o365v/L4awoWiAg9HwWdPvQhUTZYdAIff3U:mnOP5HwdTgHFvadAIX3U
Malware Config
Signatures
Files
-
8b886de3d9a40e52844ed7f5d87200d0f25851dc620de9b1e7db4329dc620289.exe windows x86
955906f43b1617530c68afe59e90eb23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameW
IsValidCodePage
HeapFree
GetLastError
HeapAlloc
DeleteFileW
SetFilePointer
DeleteFileW
HeapCreate
DeleteFileW
GetDriveTypeA
GetConsoleTitleA
lstrcatA
GetModuleHandleW
GetStringTypeW
GetTickCount
GetExitCodeProcess
GetModuleHandleA
GetVersion
lstrcmpiA
SetEnvironmentVariableA
GetStdHandle
GetStringTypeW
mstscax
DllCanUnloadNow
DllGetTscCtlVer
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ