Static task
static1
Behavioral task
behavioral1
Sample
8cf9839034910794ab80aa7e9c84a567cf9a09849de85924fbbbecd2808a9b51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cf9839034910794ab80aa7e9c84a567cf9a09849de85924fbbbecd2808a9b51.exe
Resource
win10v2004-20220812-en
General
-
Target
8cf9839034910794ab80aa7e9c84a567cf9a09849de85924fbbbecd2808a9b51
-
Size
302KB
-
MD5
48bfb22c601e3f3ec961f47c0f66c198
-
SHA1
5e02271605144998f8490e8a0c53770b79681583
-
SHA256
8cf9839034910794ab80aa7e9c84a567cf9a09849de85924fbbbecd2808a9b51
-
SHA512
b81ce0759f6911168515d676c9b3597889bfcb63c1048a74bc289f0bb5e806d0b998a7332e7162aa783774a5a3ad3423052b4cfb9d5719737c11519e8443b359
-
SSDEEP
6144:F1HhUlsHQv8VkPIL+vVrsI6Nbz3xuFJaw4zmRWiChlLibj2TUTKC5OCIAOaq/c8:FPUlKU0kPu+vVrsIez3sJa/8WjlLi9QH
Malware Config
Signatures
Files
-
8cf9839034910794ab80aa7e9c84a567cf9a09849de85924fbbbecd2808a9b51.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE