Static task
static1
Behavioral task
behavioral1
Sample
8975fa6a4d177eee6ab7d4c69fd3410da4d93beb9a0e5a00e5c486dd1e72cc69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8975fa6a4d177eee6ab7d4c69fd3410da4d93beb9a0e5a00e5c486dd1e72cc69.exe
Resource
win10v2004-20220812-en
General
-
Target
8975fa6a4d177eee6ab7d4c69fd3410da4d93beb9a0e5a00e5c486dd1e72cc69
-
Size
115KB
-
MD5
d0c41f4c0c94608931e3e322c565cd96
-
SHA1
f2a055ab8b53d56b89f733418ce4322f9ea0eaca
-
SHA256
8975fa6a4d177eee6ab7d4c69fd3410da4d93beb9a0e5a00e5c486dd1e72cc69
-
SHA512
c5ff87fa304dc9e7231a264e68681fdc9113bf8132bf4ba4068613db818d5156bf04a3f3f8d613a69edf663e0626f0ed21c37e3260dcd0235e8da3a8c939763a
-
SSDEEP
3072:+a8XlRbvGLAXswb/ErPUfUma8nAbkOa2g/+j:+dl5vGLAcXr8fe8nAbNg/i
Malware Config
Signatures
Files
-
8975fa6a4d177eee6ab7d4c69fd3410da4d93beb9a0e5a00e5c486dd1e72cc69.exe windows x86
0339d532dcf05e23547d81e14992815d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
RemoveDirectoryA
Sleep
ExitProcess
user32
GetMessagePos
Sections
.text Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Xjxermin Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Otrggwkc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fkynwrby Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ