Static task
static1
Behavioral task
behavioral1
Sample
8bf933aa41bba141aee8e3ed0adb9b58979f53d213e39bbdf1708a62cffb4c08.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8bf933aa41bba141aee8e3ed0adb9b58979f53d213e39bbdf1708a62cffb4c08.exe
Resource
win10v2004-20221111-en
General
-
Target
8bf933aa41bba141aee8e3ed0adb9b58979f53d213e39bbdf1708a62cffb4c08
-
Size
202KB
-
MD5
a76c7e49529bb6d7c2c19d659c42ebfc
-
SHA1
81f569bc0bb3bb605918fe23a8e3265e990e462c
-
SHA256
8bf933aa41bba141aee8e3ed0adb9b58979f53d213e39bbdf1708a62cffb4c08
-
SHA512
846c1e5f582c219abe9a94604e1b6c8563fa63c491d48a8873a69711b53b048edb5eac1734379aa9ef4a41f7e344150841c02e3f79ef1159c7ad7832cd01cbdf
-
SSDEEP
6144:pDl9HFTqs3hA3Pv7bXR9HSPWEBIjRQx655As0:hl9HFTwX7jbHQBAAs0
Malware Config
Signatures
Files
-
8bf933aa41bba141aee8e3ed0adb9b58979f53d213e39bbdf1708a62cffb4c08.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
BitArts Size: 18KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 183KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE