Static task
static1
Behavioral task
behavioral1
Sample
c8214d153206429ec3a48de5255315ecb4a439471feda7fa968fc404bfd86516.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8214d153206429ec3a48de5255315ecb4a439471feda7fa968fc404bfd86516.exe
Resource
win10v2004-20220812-en
General
-
Target
c8214d153206429ec3a48de5255315ecb4a439471feda7fa968fc404bfd86516
-
Size
810KB
-
MD5
35b69c5937e143c90561cb38ec81f686
-
SHA1
4b9edeca9165300a04e1c50843783d69b566e66a
-
SHA256
c8214d153206429ec3a48de5255315ecb4a439471feda7fa968fc404bfd86516
-
SHA512
cf8de421367a934be806ecc9fc1830b700f1609b84728ca85a495b20ad584a3f175432233ef794a7bb5e5f2b78fda9608baded0192a5080a936c8da46000c8ab
-
SSDEEP
24576:m+eMzz0XY2MKleP3Ic0XtC74R7nctdsu:m+FzT2MKovIc0F7cIu
Malware Config
Signatures
Files
-
c8214d153206429ec3a48de5255315ecb4a439471feda7fa968fc404bfd86516.exe windows x86
14045f9f4986a24bee29fcd156bc3946
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
OpenMutexA
lstrcpyW
GetStdHandle
GetLogicalDriveStringsW
GetModuleHandleW
GetModuleHandleA
GetFileAttributesA
GetTickCount
GetLogicalDrives
GetLogicalDrives
CreateEventA
SetCurrentDirectoryW
GetLogicalDrives
GetLogicalDrives
VirtualProtectEx
riched20
IID_IRichEditOle
RichEdit10ANSIWndProc
RichEditANSIWndProc
IID_ITextHost
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.kdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ