Static task
static1
Behavioral task
behavioral1
Sample
8ff600f54f546d4f0ddab2ca37c604771e9ab77dd852eb3e1188873599c5cbf9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ff600f54f546d4f0ddab2ca37c604771e9ab77dd852eb3e1188873599c5cbf9.exe
Resource
win10v2004-20221111-en
General
-
Target
8ff600f54f546d4f0ddab2ca37c604771e9ab77dd852eb3e1188873599c5cbf9
-
Size
305KB
-
MD5
307c06ef5530e59f65f2a76903b9c410
-
SHA1
1b81c1fa998bee6441fe5cadf03ac666ccb7fa60
-
SHA256
8ff600f54f546d4f0ddab2ca37c604771e9ab77dd852eb3e1188873599c5cbf9
-
SHA512
7716aa920e78e718193b99ecf48cc4c8e4434176bfcf611f112d85cf02ecc6cf7c264e35a931d130ef75351292bcef206d67098d7ee652b14e115c01e8a613ef
-
SSDEEP
6144:wk2lnHHnHrLrLLrLrD/5BSh2I23UHfC13FVP/XzZrss7vFEzfdZYZSuiqYkOba:wk+5U8I2E/C115lss7NCngSZQOm
Malware Config
Signatures
Files
-
8ff600f54f546d4f0ddab2ca37c604771e9ab77dd852eb3e1188873599c5cbf9.exe windows x86
d01d1f51b29da3a9b01648aaf10ce653
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
WriteConsoleW
GetACP
SetEnvironmentVariableA
LoadLibraryA
SetVolumeLabelW
GetStringTypeA
GetModuleHandleW
CreateSemaphoreW
InitializeCriticalSection
CreateMailslotA
DeleteFileA
SetCurrentDirectoryA
GetProcessHeap
DeleteFileA
CreateFileMappingW
GetConsoleAliasA
DeleteFileA
VirtualAlloc
DeviceIoControl
GetShortPathNameW
GetStringTypeW
CreatePipe
mshtml
ShowHTMLDialog
ShowModelessHTMLDialog
ShowModalDialog
DllEnumClassObjects
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ