Static task
static1
Behavioral task
behavioral1
Sample
8d56263b20a7bf015af0fea6dbba2658f91930603f23728a2cc99f8aec2dd5c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d56263b20a7bf015af0fea6dbba2658f91930603f23728a2cc99f8aec2dd5c5.exe
Resource
win10v2004-20220812-en
General
-
Target
8d56263b20a7bf015af0fea6dbba2658f91930603f23728a2cc99f8aec2dd5c5
-
Size
51KB
-
MD5
06644241d549545bf8cda166fb575c00
-
SHA1
af98d038e13b79b73c89314e92860a01a63c32a5
-
SHA256
8d56263b20a7bf015af0fea6dbba2658f91930603f23728a2cc99f8aec2dd5c5
-
SHA512
867a52f1dd81e4281ca97252de53a8db0823cf90040ab314fe8664fcfc311cf2836852658eee1cd9ee0d9ef8b8121c4c7331ba4121baa97265ce2114241a6324
-
SSDEEP
1536:+4ItaQCxBVBosU6GYUhKSlDMF5dkQbdvZB:aA7Xge1UjRMLdkWvr
Malware Config
Signatures
Files
-
8d56263b20a7bf015af0fea6dbba2658f91930603f23728a2cc99f8aec2dd5c5.exe windows x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
TYDUTERW Size: - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TYDUTERW Size: 50KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE