Static task
static1
Behavioral task
behavioral1
Sample
8d0882d0dc932624861416f1abf3db51e349217779d48f28abc02c57664a0d12.exe
Resource
win7-20220812-en
General
-
Target
8d0882d0dc932624861416f1abf3db51e349217779d48f28abc02c57664a0d12
-
Size
3.2MB
-
MD5
fac59eec7486e859695b02414feae37f
-
SHA1
c74a11c35d4fc06c41f9fb85c03bb86500db4293
-
SHA256
8d0882d0dc932624861416f1abf3db51e349217779d48f28abc02c57664a0d12
-
SHA512
64e0f78c2d9f8800f222b61947dc52764d1782319e148fae26e52251af99b3aaa395c2f81a00bb600da1bc1834a94c221e83a8e4a45c4c940745c06c453855ec
-
SSDEEP
49152:RceaDzTT/IGszJdpnBo/d7jH7yRQioiPK3l/6UTzEj66sYuC2:L6T+PpBoVj7Eef6Y
Malware Config
Signatures
Files
-
8d0882d0dc932624861416f1abf3db51e349217779d48f28abc02c57664a0d12.exe windows x86
767c551c00ba00b41662edcd3466c6fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
StrChrIA
StrStrA
kernel32
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetCurrentDirectoryA
GetModuleHandleA
GetTickCount
GetVersion
LoadResource
LockResource
RtlZeroMemory
comctl32
GetMUILanguage
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE