Static task
static1
Behavioral task
behavioral1
Sample
80a5d2af5893e8f2431ac2c690d4a5ee62871a4b26c71ac840ec38de7f6cf1c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
80a5d2af5893e8f2431ac2c690d4a5ee62871a4b26c71ac840ec38de7f6cf1c5.exe
Resource
win10v2004-20220812-en
General
-
Target
80a5d2af5893e8f2431ac2c690d4a5ee62871a4b26c71ac840ec38de7f6cf1c5
-
Size
144KB
-
MD5
11d30b27dabd6acf41d03299d24d7300
-
SHA1
486c4838088c7b1fdd754b1f7832228e0f44e234
-
SHA256
80a5d2af5893e8f2431ac2c690d4a5ee62871a4b26c71ac840ec38de7f6cf1c5
-
SHA512
7958bf7e5d1c14ee60920748a9982293887ed1ac16d01cfbd9eb94f4df12c9e403ae09563807bd30014736d8cbad42f2f8e5d5f9b06fcebcbcf245c390375124
-
SSDEEP
1536:A3ftastJpJWewY8kQte7ihpj+oWJG0Qky2yN4cwiKybQswFp3VFK4yRj+Qs3HKKo:6htJpJtwY8XtempXb0QRPVhwvr4pB
Malware Config
Signatures
Files
-
80a5d2af5893e8f2431ac2c690d4a5ee62871a4b26c71ac840ec38de7f6cf1c5.exe windows x86
f1af1abe5ac09539a99cb10db2007de1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setjmp
_setmode
atexit
signal
ysfileshim
_YSLoadLibraryA
syncuihandler
_createSharedMutexWithName
kUIHandlerInitialized
kUIHandlerLaunched
kUIHandlerInitialized
kUIHandlerLaunched
libobjc.i386.a
__objc_exec_class
__objc_exec_class_ref
objc_enumerationMutation
objc_exception_extract
objc_exception_match
objc_exception_throw
objc_exception_try_enter
objc_exception_try_exit
objc_msgSend
objc_msgSendSuper
objc_msgSend_fpret
syncservices
ISyncPlanCanceledFromUINotification
__objc_class_name_ISyncManager
__objc_class_name_ISyncManager
ISyncPlanCanceledFromUINotification
syncservicesui
__objc_class_name_ISyncUIManager
__objc_class_name_ISyncUIManager
foundation
NSLog
__objc_class_name_NSAutoreleasePool
__objc_class_name_NSDistributedNotificationCenter
__objc_class_name_NSLock
__objc_class_name_NSThread
__objc_class_name_NSAutoreleasePool
__objc_class_name_NSAutoreleasePool
__objc_class_name_NSThread
__objc_class_name_NSDistributedNotificationCenter
__objc_class_name_NSLock
corefoundation
CFRelease
CFRunLoopGetCurrent
CFRunLoopRun
CFRunLoopStop
__CFConstantStringClassReference
__objc_class_name_NSArray
__objc_class_name_NSDate
__objc_class_name_NSException
__objc_class_name_NSMutableArray
__objc_class_name_NSObject
__objc_class_name_NSTimer
__objc_class_name_NSDate
__objc_class_name_NSDate
__objc_class_name_NSTimer
__objc_class_name_NSException
__objc_class_name_NSException
__objc_class_name_NSObject
__objc_class_name_NSObject
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__CFConstantStringClassReference
__objc_class_name_NSArray
__objc_class_name_NSMutableArray
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 112B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 88KB - Virtual size: 92KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE