Static task
static1
Behavioral task
behavioral1
Sample
d8acc172e601892179473d660dc51ecad3494865e8c61f008f42eeaa84e1295c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d8acc172e601892179473d660dc51ecad3494865e8c61f008f42eeaa84e1295c.exe
Resource
win10v2004-20220812-en
General
-
Target
d8acc172e601892179473d660dc51ecad3494865e8c61f008f42eeaa84e1295c
-
Size
4.6MB
-
MD5
af726f35e68e5731743f4816a0b0db1f
-
SHA1
9abe3f44bdf7fd6e9b3a0e31a3cd4f5edefe8d9f
-
SHA256
d8acc172e601892179473d660dc51ecad3494865e8c61f008f42eeaa84e1295c
-
SHA512
787bfd209318ded9a75f0750a1f55a34f7046113e6218096bd7aa5ab160f1899bcafbe71fc91685d9dfbc2df3ae018bc2ac0f703f031e54741e1d48e7023844a
-
SSDEEP
98304:AMrvAaU/7oEb0SIkniBh3kfkeXMfC4lKvdHtbdG3dLMB19qnlARZjH:JoaU/MOCBh6VXN4Mvd5INLMEnaH
Malware Config
Signatures
Files
-
d8acc172e601892179473d660dc51ecad3494865e8c61f008f42eeaa84e1295c.exe windows x64
0741e0334420a2e5367dd3579ef8a901
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegSetValueExA
shell32
SHGetFolderPathW
Sections
.text Size: 3.0MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaoMSEN Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaoMSEN Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ