Static task
static1
Behavioral task
behavioral1
Sample
8d1fbf453bcc7515bcf7523c96b08eb6e432fd60af177ce6817e16885a615708.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d1fbf453bcc7515bcf7523c96b08eb6e432fd60af177ce6817e16885a615708.exe
Resource
win10v2004-20220812-en
General
-
Target
8d1fbf453bcc7515bcf7523c96b08eb6e432fd60af177ce6817e16885a615708
-
Size
775KB
-
MD5
231d979ee81bd621cfab987eea5c0a36
-
SHA1
1fa23e6b31a1bb96c3e995d70c60318f229698e2
-
SHA256
8d1fbf453bcc7515bcf7523c96b08eb6e432fd60af177ce6817e16885a615708
-
SHA512
d76ff981a6c464dbc88cc74e68d6ef39238bac8740a11f614112398714685abdafea72d047e6ac67d964231e1b75f841e7614e52050e6715b4d39375b392250d
-
SSDEEP
24576:kdnb2JJpBSOhwheGc+rD5hlBMhMAEXz7OfsdN97yX:kl8P7wheGdH5hleWFO67
Malware Config
Signatures
Files
-
8d1fbf453bcc7515bcf7523c96b08eb6e432fd60af177ce6817e16885a615708.exe windows x86
a8614ea66458aac6d0d8e12813acce04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPriorityClass
GetFileAttributesA
lstrlenW
WriteConsoleW
CloseHandle
GetCurrentDirectoryA
GetModuleHandleA
CopyFileW
IsDebuggerPresent
GetLastError
WriteConsoleW
GetStdHandle
SetEvent
HeapCreate
CreatePipe
GetStartupInfoA
WriteConsoleW
ClearCommBreak
DisconnectNamedPipe
lstrcpyW
ReleaseMutex
msftedit
SetCustomTextOutHandlerEx
RichListBoxWndProc
RichComboBoxWndProc
RichEditWndProc
shell32
SHGetDiskFreeSpaceA
SHGetSettings
ExtractIconA
DragQueryFileA
SHGetMalloc
DllUnregisterServer
DuplicateIcon
DragFinish
SHFree
DragAcceptFiles
ShellAboutA
StrChrA
ShellMessageBoxA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ