Static task
static1
Behavioral task
behavioral1
Sample
8ea33f7ddd08151380436a5f177e86e6d6bf5700c9ebd52abd16c67a36f57d68.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ea33f7ddd08151380436a5f177e86e6d6bf5700c9ebd52abd16c67a36f57d68.exe
Resource
win10v2004-20220812-en
General
-
Target
8ea33f7ddd08151380436a5f177e86e6d6bf5700c9ebd52abd16c67a36f57d68
-
Size
301KB
-
MD5
f21a5c420d78783d95543dc2d80e98f5
-
SHA1
31889e90c5bd39211157b48c8ea13e2718f57152
-
SHA256
8ea33f7ddd08151380436a5f177e86e6d6bf5700c9ebd52abd16c67a36f57d68
-
SHA512
6ff4a6b5f1e52a0b5f1eae02d3d313687cbf277882c2109548b82c1600da6e81dd0d27bc3103c1edfc3ca3d25720fbe7c5072274de61a6bb2f2151740d5faf80
-
SSDEEP
6144:shVPoddsGrx7R//4sUYnmWV61e4N18gHsvluSvSxB8lWBAS6sRsLwL:shxgdsGBRYs4E61e4jMvEA56P6sZ
Malware Config
Signatures
Files
-
8ea33f7ddd08151380436a5f177e86e6d6bf5700c9ebd52abd16c67a36f57d68.exe windows x86
df48f1392a3b31025d1a44f1d20cb03a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
GetTickCount
GetLocalTime
EndUpdateResourceA
HeapCreate
CreateWaitableTimerW
TlsFree
lstrcatW
GetBinaryTypeA
lstrcmpiA
GetLogicalDrives
IsValidCodePage
GetExitCodeProcess
lstrcmpiA
GetDriveTypeA
CreateNamedPipeA
GetModuleHandleA
lstrcmpiA
lstrcmpiA
SetLastError
GetPrivateProfileStringA
lstrcmpiA
GetStdHandle
netshell
HrGetIconFromMediaType
HrLaunchConnectionEx
NcFreeNetconProperties
DllGetClassObject
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ