Static task
static1
Behavioral task
behavioral1
Sample
8c086aa247614e3676680fe7b264d6f9b04de324dd5c71b2989091a48dcc8e89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c086aa247614e3676680fe7b264d6f9b04de324dd5c71b2989091a48dcc8e89.exe
Resource
win10v2004-20221111-en
General
-
Target
8c086aa247614e3676680fe7b264d6f9b04de324dd5c71b2989091a48dcc8e89
-
Size
80KB
-
MD5
ee1ab4f0a0090454a51b3121074dcf1b
-
SHA1
bc1c7804459cb47289fc7eaafe4f93ffe060d421
-
SHA256
8c086aa247614e3676680fe7b264d6f9b04de324dd5c71b2989091a48dcc8e89
-
SHA512
22043cdd323abbf5576061ca5ccbcdb28132f96957e6c025c1f3dbee59ffecd02166bf5f7ad950f87a53827f8eeb33e23bf9292e145df32c3c41df0529d3207a
-
SSDEEP
1536:i7Rtcv05MhkU+TjUqNlIoz1IDBYut0cqNtXnQD82hW8fPL:iFO85MhEYZi8YO2tAD8vYL
Malware Config
Signatures
Files
-
8c086aa247614e3676680fe7b264d6f9b04de324dd5c71b2989091a48dcc8e89.exe windows x86
57b06208ba7e17cf55fde5d5d8a5b3aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
BuildCommDCBA
FindResourceA
MoveFileExW
ResetEvent
QueryActCtxW
FlushViewOfFile
MoveFileWithProgressA
GlobalFree
GetExpandedNameA
WaitForDebugEvent
PrepareTape
CreateDirectoryExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE