Static task
static1
Behavioral task
behavioral1
Sample
c8b1a68668b400e751b913269d16d69f73b9936848ab67ce712e031ca993b90e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8b1a68668b400e751b913269d16d69f73b9936848ab67ce712e031ca993b90e.exe
Resource
win10v2004-20221111-en
General
-
Target
c8b1a68668b400e751b913269d16d69f73b9936848ab67ce712e031ca993b90e
-
Size
71KB
-
MD5
d2375fcc28b609e1b6864a01a05747b6
-
SHA1
73375d036848e38187fcfc7f991d6ab8d92b2c7c
-
SHA256
c8b1a68668b400e751b913269d16d69f73b9936848ab67ce712e031ca993b90e
-
SHA512
31f436ad0c3a1349643ed55d3c1141e734c9be87c253e3b79739c14e7da41bce86e2e200c610eb9dfc3e669cc3a2da22cc3de54a1a44f82db0635a12a7478cb9
-
SSDEEP
1536:zKsDNP1FNNOBx2kKFC9BeViETpUB9b7LTx9cvuYxpOCYNKj0j+0J5DCz:zKsDJbNNOn2kKwreViKmd99cvDpPj0jW
Malware Config
Signatures
Files
-
c8b1a68668b400e751b913269d16d69f73b9936848ab67ce712e031ca993b90e.exe windows x86
6d6de74b60af5d8a06e5dd1a2dadf273
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
SetConsoleActiveScreenBuffer
CreateMutexW
GetConsoleCommandHistoryLengthW
IsWow64Process
GetCurrentActCtx
WaitCommEvent
CancelIo
GetConsoleFontInfo
FindFirstChangeNotificationW
CreateMailslotW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE