Static task
static1
Behavioral task
behavioral1
Sample
8c040e3cefd1c5c3dde6089110e00318024cebe02b313883279b4c6ad3bf4878.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c040e3cefd1c5c3dde6089110e00318024cebe02b313883279b4c6ad3bf4878.exe
Resource
win10v2004-20221111-en
General
-
Target
8c040e3cefd1c5c3dde6089110e00318024cebe02b313883279b4c6ad3bf4878
-
Size
793KB
-
MD5
0e56cdb7bb59db7c324fbf9f2b2a285b
-
SHA1
6efd7bb7967d4f5f31d6ba5bea4ffe87c1043e8a
-
SHA256
8c040e3cefd1c5c3dde6089110e00318024cebe02b313883279b4c6ad3bf4878
-
SHA512
80e8751aab899ab10e21169e728aae3b90af4c1ca9e909e2662755992dbc3f4fdffed7441f416ff553812bce9efc54522adeade9f2857b32a5cefb6a56cbdbca
-
SSDEEP
12288:7QsOLNx1GdwG0fZ2ZbF335BW11vJRpUw9B9Y+rgmoKcr+wiqndQzIfnC:csOLNx1ykfGbF3JipU4FcRndQEq
Malware Config
Signatures
Files
-
8c040e3cefd1c5c3dde6089110e00318024cebe02b313883279b4c6ad3bf4878.exe windows x86
7db16c1f842c90450568e350332b65d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
WriteConsoleA
GetFileAttributesW
DeleteFileA
SetLastError
LoadLibraryA
lstrlenA
GetProcessHeap
CloseHandle
Sleep
CreateMutexA
SetEvent
CreateDirectoryW
CreateSemaphoreA
GetLocalTime
HeapSize
GlobalFree
GetTickCount
VirtualProtectEx
GetStartupInfoA
CreateHardLinkA
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetClassObject
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE