Static task
static1
Behavioral task
behavioral1
Sample
8decf87a663d311aa46bee80e940f83daaa28cc788410f79bfbd9b80aead116b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8decf87a663d311aa46bee80e940f83daaa28cc788410f79bfbd9b80aead116b.exe
Resource
win10v2004-20221111-en
General
-
Target
8decf87a663d311aa46bee80e940f83daaa28cc788410f79bfbd9b80aead116b
-
Size
262KB
-
MD5
e135ee0d7cecb3fd6707fe9ab0cd2daa
-
SHA1
aaa5f0aa8fa6b90b2eea0899d338f0f7556a5012
-
SHA256
8decf87a663d311aa46bee80e940f83daaa28cc788410f79bfbd9b80aead116b
-
SHA512
986265efdc1d9c265d60a2d5eb63a31e3351ac2d22870247880da4eb94c500623d6189e7825c13f5b203929c9ed28fce86b88d3f0742f0eca127141c2306f528
-
SSDEEP
6144:n5mts+yZ2zxvsr6Jj8fjvA7sG8jaBkj2p0JwaNnRSChs8bEOsgX88xAlg:nE6Z2zx0wj8fjvWN8+30Jw2RMIJQg
Malware Config
Signatures
Files
-
8decf87a663d311aa46bee80e940f83daaa28cc788410f79bfbd9b80aead116b.exe windows x86
f14949ed9d4fe8d2d7ea56338804a15e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddExtensionA
StrFormatByteSize64A
kernel32
VirtualAlloc
LoadLibraryA
ExitProcess
VirtualProtect
CloseHandle
GetProcAddress
user32
GetMessageW
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ