Static task
static1
Behavioral task
behavioral1
Sample
8a606a51594e0f522a506eaff1f387ae552bc56b362c8beb85dec4be19d5c37e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a606a51594e0f522a506eaff1f387ae552bc56b362c8beb85dec4be19d5c37e.exe
Resource
win10v2004-20220812-en
General
-
Target
8a606a51594e0f522a506eaff1f387ae552bc56b362c8beb85dec4be19d5c37e
-
Size
28KB
-
MD5
01e7828f221edf2b3668aa622325c1b0
-
SHA1
19c97767f38262512a71425a4514ddc9c9f34f8f
-
SHA256
8a606a51594e0f522a506eaff1f387ae552bc56b362c8beb85dec4be19d5c37e
-
SHA512
3cf8715b4a8d16a9ecfdcc040466c8c9bdc4f64ea93942d764729a9fabd35b18d846998faa4dcfe090d20278a684eb4d04dd7d1d9a7f8510191498981d2a7108
-
SSDEEP
384:rmkMWZ1mcjWDKgT2FU+TRLsaTWbUzedL/OFIn:rxntjWZ6FU+9LsaTWb3N/wIn
Malware Config
Signatures
Files
-
8a606a51594e0f522a506eaff1f387ae552bc56b362c8beb85dec4be19d5c37e.exe windows x86
0681ac0d4155cc5bc185aba0ca5b8828
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
ResumeThread
GetThreadContext
VirtualAlloc
CreateProcessA
GetLocalTime
LoadLibraryA
ReadProcessMemory
OutputDebugStringA
GetStartupInfoA
advapi32
RegQueryValueA
msvcrt
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ