Static task
static1
Behavioral task
behavioral1
Sample
8ac38d8979aba45647d9499be9210453e5ff403c2d1b7f9c1469b57808bf8bb5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ac38d8979aba45647d9499be9210453e5ff403c2d1b7f9c1469b57808bf8bb5.exe
Resource
win10v2004-20220812-en
General
-
Target
8ac38d8979aba45647d9499be9210453e5ff403c2d1b7f9c1469b57808bf8bb5
-
Size
150KB
-
MD5
df05812dc609b1966349e787fd89b9fc
-
SHA1
369d5b8cb7947b4b28a6248bb24b1a5821adb850
-
SHA256
8ac38d8979aba45647d9499be9210453e5ff403c2d1b7f9c1469b57808bf8bb5
-
SHA512
cde48adb4b391895980c80b9bca3f114f2779ae052bb80141767de19296762ae5a0e691282362b7b8b1cfcdf09fe6c464e308048ad068493207d407427d83daf
-
SSDEEP
3072:MLYg2sJpMVWfdSp+Ok1J5AH5bNDVpIeZZFpmHtOxc:MLbMoEAOklAHZNMkpmHka
Malware Config
Signatures
Files
-
8ac38d8979aba45647d9499be9210453e5ff403c2d1b7f9c1469b57808bf8bb5.exe windows x86
3e983e04c583ee6ec2faf4d4ec631921
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
ReadFile
SizeofResource
SetFilePointer
GetFileAttributesA
SetEndOfFile
MapViewOfFile
GetCurrentProcess
CreateFileMappingW
GetSystemInfo
VirtualQueryEx
EnumResourceNamesW
FindNextFileA
GetModuleFileNameA
UnmapViewOfFile
ExitProcess
CreateFileA
FindResourceW
FindFirstFileA
LockResource
GetTempPathA
FindClose
CloseHandle
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
ole32
CoFileTimeNow
CoUninitialize
StgOpenStorage
CoCreateInstance
CoInitialize
oleacc
LresultFromObject
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ