Static task
static1
Behavioral task
behavioral1
Sample
8505788d8335073103d0b985cb144654114761d5b447ff4ca0cbe6e597098dc4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8505788d8335073103d0b985cb144654114761d5b447ff4ca0cbe6e597098dc4.exe
Resource
win10v2004-20220812-en
General
-
Target
8505788d8335073103d0b985cb144654114761d5b447ff4ca0cbe6e597098dc4
-
Size
21KB
-
MD5
ea7cd97e254ca01c62cad1aae8e0f811
-
SHA1
0bff358cefc3ed51c3572dab425188518d45f752
-
SHA256
8505788d8335073103d0b985cb144654114761d5b447ff4ca0cbe6e597098dc4
-
SHA512
824b840d88026e7fab2fb5e9a77bc96a88f5f6fd982b7944e0ed6d8629acf1cc9aaf3990666728dc6778d42650574ebb85b4d0dc31412c4a0cace3e82de6ea14
-
SSDEEP
384:xOcXfVPSAUW/8AoWstmwU7unX9CZWxzt1DxWfymWSj:siVqA+AWEuNLRr
Malware Config
Signatures
Files
-
8505788d8335073103d0b985cb144654114761d5b447ff4ca0cbe6e597098dc4.exe windows x86
069e549a49dce537bf6436c111d7f294
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA
user32
MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA
msvcrt
_except_handler3
_stricmp
atoi
strrchr
_itoa
netapi32
Netbios
Sections
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ