Static task
static1
Behavioral task
behavioral1
Sample
8c20e4bb7d0f625221d8a2163534b34f5ebdeba935ad0ecd570177dd4aade3b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c20e4bb7d0f625221d8a2163534b34f5ebdeba935ad0ecd570177dd4aade3b5.exe
Resource
win10v2004-20221111-en
General
-
Target
8c20e4bb7d0f625221d8a2163534b34f5ebdeba935ad0ecd570177dd4aade3b5
-
Size
48KB
-
MD5
2e371f034ea692a4aca685d7e9445b1c
-
SHA1
b1324f8f3d2ba644eda6f8fa9998e014b8e7e609
-
SHA256
8c20e4bb7d0f625221d8a2163534b34f5ebdeba935ad0ecd570177dd4aade3b5
-
SHA512
3639e83a703ae709ac164ab2319989304a9c7c0924ac19b1e8a7450517d8aa49c6e4ded332f3be5d538a24a144594110830a84325b45dad9ec4bbaf70618166d
-
SSDEEP
384:lQUyOZfwmlkvGKlV31CtYAWktvZU8WaeoWLzI9gNH2+kDPNJdoW0:mU7ZotlKYlktxUxToeM9yHNkD6
Malware Config
Signatures
Files
-
8c20e4bb7d0f625221d8a2163534b34f5ebdeba935ad0ecd570177dd4aade3b5.exe windows x86
010f012d5a55e1e96593b2cbd811a35d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
SizeofResource
CreateMutexA
OpenMutexA
WriteFile
CloseHandle
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
SetFilePointer
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ