Static task
static1
Behavioral task
behavioral1
Sample
8c31b49e2826cfc4a853418891ce2e621ef889127201e87a71e0c248fa2ef8aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c31b49e2826cfc4a853418891ce2e621ef889127201e87a71e0c248fa2ef8aa.exe
Resource
win10v2004-20221111-en
General
-
Target
8c31b49e2826cfc4a853418891ce2e621ef889127201e87a71e0c248fa2ef8aa
-
Size
189KB
-
MD5
97da7444840e2d1682ef9b30631ac122
-
SHA1
7c2df895951b41675a8d7fc88411165f191b647c
-
SHA256
8c31b49e2826cfc4a853418891ce2e621ef889127201e87a71e0c248fa2ef8aa
-
SHA512
7f8ab7b7c17b466913bd6b877f6b79b90be1cf5c8ea771703ef2439d49386c1653175b0a389be7afa0cc1d6e7d7daf1882ca63067d33ceb55eef1ce2084c134f
-
SSDEEP
3072:tkCS2iO+1MtKWF5miD0h474fUDmCRNI6oWL10DXhSTp6:GVO6sF5vN4amCRiYhsn
Malware Config
Signatures
Files
-
8c31b49e2826cfc4a853418891ce2e621ef889127201e87a71e0c248fa2ef8aa.exe windows x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE