Static task
static1
Behavioral task
behavioral1
Sample
8f8ae38dc0f0d75371ab667f240a6e256d5e7ce0aa32168a19415cf660d83664.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f8ae38dc0f0d75371ab667f240a6e256d5e7ce0aa32168a19415cf660d83664.exe
Resource
win10v2004-20220812-en
General
-
Target
8f8ae38dc0f0d75371ab667f240a6e256d5e7ce0aa32168a19415cf660d83664
-
Size
991KB
-
MD5
17855b3b1f0709429881c88fe8c402d2
-
SHA1
1a543b028145da7beaf30e73878cc620793a6cb2
-
SHA256
8f8ae38dc0f0d75371ab667f240a6e256d5e7ce0aa32168a19415cf660d83664
-
SHA512
340d11d2813c5dfa09f1987acd78c20cdcdc0e2f91aedc5c695811e7bf3f9a364485651bcc2daeb0dcf23074d0d765d3403e9dd07eb856332c07f87103f94c96
-
SSDEEP
24576:AnPHLpBOdglA8fw03u5ysq+aSTAaWs105M5ogV8QTG9c:AnT/OKlA8b3eysqsTZh0PgeQK9c
Malware Config
Signatures
Files
-
8f8ae38dc0f0d75371ab667f240a6e256d5e7ce0aa32168a19415cf660d83664.exe windows x86
f0b97ec20619d838597c83cb4f498451
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetCommandLineA
GetModuleHandleA
ExitProcess
GetConsoleCursorInfo
Heap32ListFirst
GetLastError
advapi32
PrivilegeCheck
Sections
CODE Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ecode Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 968KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.isectio Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text621 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ