Static task
static1
Behavioral task
behavioral1
Sample
8723eac6dedcae208e676a73300b2c9b05ab07b3200141ea02e1e52efe919b7c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8723eac6dedcae208e676a73300b2c9b05ab07b3200141ea02e1e52efe919b7c.exe
Resource
win10v2004-20221111-en
General
-
Target
8723eac6dedcae208e676a73300b2c9b05ab07b3200141ea02e1e52efe919b7c
-
Size
745KB
-
MD5
dd501450247f9bac893a558f898ab670
-
SHA1
668ecc62b701ae3b4d8aedb721234e1dde48d7ce
-
SHA256
8723eac6dedcae208e676a73300b2c9b05ab07b3200141ea02e1e52efe919b7c
-
SHA512
290b12446af8cc44ba64b9afeae8d0264936b99b46ab140a22d0fdb4fa47bd68728a5ea63a0475159ff477bc91740241099fac5fc231d76733959ccae438dc34
-
SSDEEP
12288:XTlEXc8j1Dys2YcGIcCjlhtrK6znzJNKV2WHVOy9XfUljy3SjaZsCqSVMQhKWOZ:RwATGs5W6znzJi2ID9XccU+KW
Malware Config
Signatures
Files
-
8723eac6dedcae208e676a73300b2c9b05ab07b3200141ea02e1e52efe919b7c.exe windows x86
76661e5109529c0ab85b4e872a7de285
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
GetModuleHandleA
IsBadReadPtr
FindAtomW
EnterCriticalSection
GetEnvironmentVariableA
ResumeThread
CreateFileA
SetLastError
HeapSize
GetFileAttributesA
GetStdHandle
GetExitCodeThread
GetVersion
GetFileSize
SetLastError
SetFileAttributesA
CloseHandle
VirtualAlloc
GetCommandLineA
WaitForSingleObject
DeleteFileA
DeleteAtom
GetCurrentDirectoryA
ExitProcess
shell32
SHGetMalloc
ShellAboutA
DragQueryFileA
SHFree
SHGetSettings
ExtractIconA
StrChrA
ShellMessageBoxA
SHFree
DllUnregisterServer
DuplicateIcon
DragAcceptFiles
DragFinish
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ