Static task
static1
Behavioral task
behavioral1
Sample
e8037c5561674c221e109b50a8222847d168f5c9e637f920c26510ee0e54e767.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8037c5561674c221e109b50a8222847d168f5c9e637f920c26510ee0e54e767.exe
Resource
win10v2004-20221111-en
General
-
Target
e8037c5561674c221e109b50a8222847d168f5c9e637f920c26510ee0e54e767
-
Size
155KB
-
MD5
8f8310851cccf6530d5cb2213c55d259
-
SHA1
13bffcfb07f05b30d778593faf39c911aab9b215
-
SHA256
e8037c5561674c221e109b50a8222847d168f5c9e637f920c26510ee0e54e767
-
SHA512
6a6b440523b4a0b18955066f2f8e9dfcca8f9a1777fb23f5aa7055b67d981a227c0f74462ca5d05477846e995a6e96ae584355fc809982113080b9aebd3ad1c0
-
SSDEEP
3072:c+ja63F4LsU9A22LypRxSoUQSPc4FdFRKgKh106f8cQGCDEsfX9H:c+GDLsUa2T0oT4F/R20g8HGEX9H
Malware Config
Signatures
Files
-
e8037c5561674c221e109b50a8222847d168f5c9e637f920c26510ee0e54e767.exe windows x86
8900ca91e5d0be43831f1caa268c3848
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeA
FindFirstChangeNotificationW
CreateFileW
DeleteCriticalSection
AllocConsole
RemoveDirectoryA
SetConsoleNumberOfCommandsA
ReadProcessMemory
SearchPathA
SetTapePosition
RtlZeroMemory
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE