Static task
static1
Behavioral task
behavioral1
Sample
c8be2e9e40cc3273b07e344416a4ae85a64a9913b3a99bcf6fcaafaf6cd72682.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8be2e9e40cc3273b07e344416a4ae85a64a9913b3a99bcf6fcaafaf6cd72682.exe
Resource
win10v2004-20221111-en
General
-
Target
c8be2e9e40cc3273b07e344416a4ae85a64a9913b3a99bcf6fcaafaf6cd72682
-
Size
119KB
-
MD5
38b31186b2b9ae1272f776a32e4d2488
-
SHA1
2ad91874599a9db829c6556780a1bb41341738b1
-
SHA256
c8be2e9e40cc3273b07e344416a4ae85a64a9913b3a99bcf6fcaafaf6cd72682
-
SHA512
940e6041c7e608a77cdeb394b453d843577b2d1a0a78a2dbd53023de7900b414de2347831ddace2cb127b056a5677342323ebab4b6299e9f29769d94e169ac58
-
SSDEEP
1536:X0sDsl7y9N0QQaF7qkB2WL3EWsMtyaWAFDi3iRhpjVrs2ryrd1vUQuqSSqK5tnC3:X0R7YyQTWWwbMoa9FFhHs2qxnC
Malware Config
Signatures
Files
-
c8be2e9e40cc3273b07e344416a4ae85a64a9913b3a99bcf6fcaafaf6cd72682.exe windows x86
67979119e4a2fe4414f11e555ca1af03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalReAlloc
GetNumaNodeProcessorMask
RegisterWowBaseHandlers
GetCommProperties
FindFirstVolumeW
GetEnvironmentStrings
Heap32First
CreateFileA
WideCharToMultiByte
SetThreadLocale
PostQueuedCompletionStatus
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE