Static task
static1
Behavioral task
behavioral1
Sample
8ca6c992cea6577af47da9fa48c2e2be918a0b4af1d6fe1b5d2b4f0e97b67ac0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ca6c992cea6577af47da9fa48c2e2be918a0b4af1d6fe1b5d2b4f0e97b67ac0.exe
Resource
win10v2004-20220901-en
General
-
Target
8ca6c992cea6577af47da9fa48c2e2be918a0b4af1d6fe1b5d2b4f0e97b67ac0
-
Size
91KB
-
MD5
09edb10ae178fdd04302340750f526e4
-
SHA1
f3cb7411ec58efd650a9bbd354ed3e4b48b7bc5e
-
SHA256
8ca6c992cea6577af47da9fa48c2e2be918a0b4af1d6fe1b5d2b4f0e97b67ac0
-
SHA512
2dd3b9c90909b8f2fcc393de67f1c878e74a9ece8f797fcf3d5530150a0b846a11de322f0eaa8c3e12165c40cd81b493baedc7fa9a2319f477249bda8c516132
-
SSDEEP
1536:pIM8lNWBnItpiX9p3r8CkOdWtbzYzTMJGSPZRPK4wy/gL9h1qNcWrZ7dX6:pIMLBnIs9LdgE0kyZbwcMoPLX6
Malware Config
Signatures
Files
-
8ca6c992cea6577af47da9fa48c2e2be918a0b4af1d6fe1b5d2b4f0e97b67ac0.exe windows x86
dff69e63bf2a98049aceb217d6933751
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p___initenv
__p__commode
_adjust_fdiv
_except_handler3
_controlfp
__getmainargs
_XcptFilter
_exit
_initterm
__p__fmode
__set_app_type
kernel32
LCMapStringW
GetTempPathA
GetSystemTime
WideCharToMultiByte
GetEnvironmentStringsW
GetACP
GetTempPathW
DeviceIoControl
GetCurrentThread
GetOEMCP
GetCurrentProcess
IsBadWritePtr
FreeEnvironmentStringsA
GetStringTypeW
RemoveDirectoryA
FreeEnvironmentStringsW
GetModuleHandleA
GetVersion
GetCurrentThreadId
LoadResource
OpenProcess
WritePrivateProfileStringA
VirtualProtect
GetProcessHeap
IsValidCodePage
SystemTimeToFileTime
LoadLibraryW
GetExitCodeProcess
GetFileAttributesA
GetStartupInfoA
GlobalHandle
lstrcmpiW
lstrcmpA
GetLocaleInfoW
GetConsoleOutputCP
DeleteFileA
GetThreadLocale
CreateDirectoryA
lstrcpynA
WaitForMultipleObjects
GlobalUnlock
LocalFileTimeToFileTime
lstrlenW
Sections
.text Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ