Static task
static1
Behavioral task
behavioral1
Sample
8bbf6892298743d86441715c41448d26e3e3b0326e2696e94c4fdbbffa327615.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8bbf6892298743d86441715c41448d26e3e3b0326e2696e94c4fdbbffa327615.exe
Resource
win10v2004-20220901-en
General
-
Target
8bbf6892298743d86441715c41448d26e3e3b0326e2696e94c4fdbbffa327615
-
Size
3KB
-
MD5
30d06532dc8d25001827568cf89bebb0
-
SHA1
968968121dcadef0d47cf55c7fdf304200e3b2d2
-
SHA256
8bbf6892298743d86441715c41448d26e3e3b0326e2696e94c4fdbbffa327615
-
SHA512
835910a70b3713d68a5d580e608b75d409dfb29550742fc7aa090d513330a9bc1b71af0ddb321cb8b5f40ecfa85b33404bc5e2bc13a059730bdb435e3a000c67
Malware Config
Signatures
Files
-
8bbf6892298743d86441715c41448d26e3e3b0326e2696e94c4fdbbffa327615.exe windows x86
4592a51e6fe78d18da25a5d94b0153f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle
advapi32
CreateProcessWithLogonW
Sections
.text Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ