Static task
static1
Behavioral task
behavioral1
Sample
8ed144990ea6a6c16257fa960e71359157c7c92e81667d1d54ffe0e841d289cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ed144990ea6a6c16257fa960e71359157c7c92e81667d1d54ffe0e841d289cd.exe
Resource
win10v2004-20221111-en
General
-
Target
8ed144990ea6a6c16257fa960e71359157c7c92e81667d1d54ffe0e841d289cd
-
Size
120KB
-
MD5
d5e25a7095f8f37ea209fa30fcdb41df
-
SHA1
cb05bc511b3aa77abce8f102d1f39da27583e9f6
-
SHA256
8ed144990ea6a6c16257fa960e71359157c7c92e81667d1d54ffe0e841d289cd
-
SHA512
0ec5bbec45b84db0139078a43b60187dd225730cf9cdcf1bd74b606f3cac41072f9ea35bbeb278ec752b892203b17ce2e26fe07627a7b6887c23064d2c6f9fc0
-
SSDEEP
1536:IY8kwiSTEhU4HDa1KkjWXUa21mc/Mue9:I6hSohUEK9ekp
Malware Config
Signatures
Files
-
8ed144990ea6a6c16257fa960e71359157c7c92e81667d1d54ffe0e841d289cd.exe windows x86
bcc72ef83efb1f1feb04585842b4fa1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LoadLibraryA
GetProcAddress
user32
TranslateMessage
DispatchMessageA
GetMessageA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 330B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE