Static task
static1
Behavioral task
behavioral1
Sample
8081b2d6c16031881e95ca007b83500ba15b6846f86736fe1b4092c5f103d15d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8081b2d6c16031881e95ca007b83500ba15b6846f86736fe1b4092c5f103d15d.exe
Resource
win10v2004-20221111-en
General
-
Target
8081b2d6c16031881e95ca007b83500ba15b6846f86736fe1b4092c5f103d15d
-
Size
22KB
-
MD5
3f76b208dc3b22e759b72d8f99a94650
-
SHA1
991cee5737984a14bc3e80aa8309381479fd4f4e
-
SHA256
8081b2d6c16031881e95ca007b83500ba15b6846f86736fe1b4092c5f103d15d
-
SHA512
3b99cf5da133d10dc13efe39953e860773a683cc32d7e30968cf8f765877b479477500e61609028f19ebdc764bda87045f5232f057f504c131b8b5fedcd0aad5
-
SSDEEP
384:HeIzryg1ZOnuNNB/WnXMQcKsTdbNhOXqo0t/Y83i5WS4mW+p:HeGrKuNbq8QBwhyIJYru
Malware Config
Signatures
Files
-
8081b2d6c16031881e95ca007b83500ba15b6846f86736fe1b4092c5f103d15d.exe windows x86
fac5513f4c5616ab7a1df9208935e3a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAddAccessAllowedAceEx
NtAllocateVirtualMemory
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
setupapi
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
netapi32
NetDfsMove
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
kernel32
FormatMessageW
GetLastError
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ