Static task
static1
Behavioral task
behavioral1
Sample
c8494527340fa9c8117a9c842d8ec05cbaab3c47944e05c73f8952c5e85c2655.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8494527340fa9c8117a9c842d8ec05cbaab3c47944e05c73f8952c5e85c2655.exe
Resource
win10v2004-20220901-en
General
-
Target
c8494527340fa9c8117a9c842d8ec05cbaab3c47944e05c73f8952c5e85c2655
-
Size
150KB
-
MD5
8fab087aef40a94279fe129eeb671948
-
SHA1
a7f026ee83434abc05c1bf7080586c952a946370
-
SHA256
c8494527340fa9c8117a9c842d8ec05cbaab3c47944e05c73f8952c5e85c2655
-
SHA512
3d5b5ca440dd604beed32aafad5c910de007b525072cc9c133c1d9d058bb052623c7be0e0cec0615b68df8e99427c84ef0ec6d3161f7c37ad61b658e4c62186c
-
SSDEEP
1536:Lg0d6khA5bJCLnB9wr8YIlANDFC/cyxIxBs6T577HD88M6BiQpNRuFDeOqdo7vp1:qCL8IlANxRRvfiQpNEFivd7q
Malware Config
Signatures
Files
-
c8494527340fa9c8117a9c842d8ec05cbaab3c47944e05c73f8952c5e85c2655.exe windows x86
0fd75817e88bc985535ca2b23c86ca86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetTempPathA
CreateFileA
GetModuleFileNameA
GetModuleHandleA
ReadFile
OpenProcess
GetLastError
GetCurrentProcess
GetCurrentThread
lstrcatA
WriteFile
CloseHandle
TerminateProcess
WinExec
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenThreadToken
shell32
ShellExecuteA
psapi
EnumProcesses
GetModuleBaseNameA
EnumProcessModules
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE