Static task
static1
Behavioral task
behavioral1
Sample
8dff857fe49893a5e7eba552e7b0bd8be97577abeb3d76bc356eab8297ed7ee6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8dff857fe49893a5e7eba552e7b0bd8be97577abeb3d76bc356eab8297ed7ee6.exe
Resource
win10v2004-20220812-en
General
-
Target
8dff857fe49893a5e7eba552e7b0bd8be97577abeb3d76bc356eab8297ed7ee6
-
Size
155KB
-
MD5
45288ddb58430db459c8f366b31b8cd0
-
SHA1
e0cd70951b53446ae6ffb1459d7b6ffdf2dbd7cc
-
SHA256
8dff857fe49893a5e7eba552e7b0bd8be97577abeb3d76bc356eab8297ed7ee6
-
SHA512
0ae00a4357429c78ebf3f22eb3108168f1819f45d18dbae07e9a0c8e1536816579de2a6ef791b0f490dcb482f0a33a78ce0b5f06c5d281225363a078a6723cf2
-
SSDEEP
3072:aArDHh6Iqzk/9nSOlrYxixHQuf7i6j7ZouQQ/3n5/foWxrD4970VS:aAvHgCnSOlrYxXuJviWv5/focmyS
Malware Config
Signatures
Files
-
8dff857fe49893a5e7eba552e7b0bd8be97577abeb3d76bc356eab8297ed7ee6.exe windows x86
50ea42e92a787efde23a91f8b699a0bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCancelTimer
NtClose
NtAccessCheckByType
NtClearEvent
NlsAnsiCodePage
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
kernel32
FindNextFileW
GetCommProperties
WriteTapemark
GetComputerNameW
shell32
Shell_NotifyIconW
StrNCmpW
SheFullPathW
SheRemoveQuotesW
Sections
.text Size: 62KB - Virtual size: 90KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE