Static task
static1
Behavioral task
behavioral1
Sample
80883b858f340a01765129b8ffd6d80ac423b7827e222210f78e21cbcc0854cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
80883b858f340a01765129b8ffd6d80ac423b7827e222210f78e21cbcc0854cd.exe
Resource
win10v2004-20221111-en
General
-
Target
80883b858f340a01765129b8ffd6d80ac423b7827e222210f78e21cbcc0854cd
-
Size
315KB
-
MD5
edf6dfbebf9a2c141fff4a113c9165e4
-
SHA1
35d08825a8cf6c92e1f0118e25ec3f575830927f
-
SHA256
80883b858f340a01765129b8ffd6d80ac423b7827e222210f78e21cbcc0854cd
-
SHA512
fa12e9d15f82bd049f1b50a6495cf75d163cc8eb58c63bf004584f57cff312692ab6cf4e6f9873767d10f020aa1b6a980ab86ed21352487af739d146598fd1da
-
SSDEEP
6144:7UsU60kA+qw0DLtxoUJm50HeZU5DAgDhfU:dUpOoRxoh50He8js
Malware Config
Signatures
Files
-
80883b858f340a01765129b8ffd6d80ac423b7827e222210f78e21cbcc0854cd.exe windows x86
06a45362a2bc79181c91004841d57255
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesW
LocalFree
GetDriveTypeW
GetCommandLineA
GetDateFormatA
CloseHandle
DeleteCriticalSection
GetDiskFreeSpaceExA
LoadLibraryExW
VirtualProtect
GetModuleHandleA
GetLastError
IsBadStringPtrA
ResetEvent
FindClose
CancelIo
IsBadReadPtr
FreeConsole
SetLastError
TlsGetValue
advapi32
OpenEventLogA
RegEnumKeyExA
GetFileSecurityW
CloseEventLog
CloseTrace
LsaFreeMemory
FreeSid
GetLengthSid
RegCloseKey
LsaClose
AccessCheck
IsTokenUntrusted
RegCreateKeyExA
RegCloseKey
hnetcfg
DllRegisterServer
HNetDeleteRasConnection
HNetGetSharingServicesPage
DllGetClassObject
HNetFreeSharingServicesPage
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ