Static task
static1
Behavioral task
behavioral1
Sample
8cf6eaca664928e0de82f67e81bdb162f6e1480b3662a97df77426a810870c23.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cf6eaca664928e0de82f67e81bdb162f6e1480b3662a97df77426a810870c23.exe
Resource
win10v2004-20220812-en
General
-
Target
8cf6eaca664928e0de82f67e81bdb162f6e1480b3662a97df77426a810870c23
-
Size
14KB
-
MD5
72abf4e97f8c8f883e8439780c9e427f
-
SHA1
b47598f7cab0f67007908d2e15c059eb9dd029d7
-
SHA256
8cf6eaca664928e0de82f67e81bdb162f6e1480b3662a97df77426a810870c23
-
SHA512
cb943c7d25bd211337c4625eb3c429f8327a6a9dcd0456d17156d9ca031db11a28e9604bcb8dc2fa3216e40e8c41c295b31dbd0c98d005ab103792c6f00436b1
-
SSDEEP
192:Jnyx3pg8K7ECjRwOHhMIjiHogbyX/a3x5okYruevg0NB:kx3e7lwOmwXyhbexNB
Malware Config
Signatures
Files
-
8cf6eaca664928e0de82f67e81bdb162f6e1480b3662a97df77426a810870c23.exe windows x86
13cb1ff4c50a26d6f0d6707ca7fd88cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateProcessA
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetThreadContext
HeapAlloc
InitializeCriticalSection
InitializeProcThreadAttributeList
LeaveCriticalSection
LoadLibraryA
OpenProcess
Process32First
Process32Next
ResumeThread
SetThreadContext
SetUnhandledExceptionFilter
Sleep
TlsGetValue
UpdateProcThreadAttribute
VirtualAlloc
VirtualAllocEx
VirtualProtect
VirtualQuery
WriteProcessMemory
msvcrt
__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
_strnicmp
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 196B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE