Static task
static1
Behavioral task
behavioral1
Sample
8f94df76b9039677674732c514765c48b528862afeb9fbd3288d8841ee7e6085.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f94df76b9039677674732c514765c48b528862afeb9fbd3288d8841ee7e6085.exe
Resource
win10v2004-20221111-en
General
-
Target
8f94df76b9039677674732c514765c48b528862afeb9fbd3288d8841ee7e6085
-
Size
183KB
-
MD5
198d92567624a199782fcc1dfb2de7e9
-
SHA1
2fbc3c009f6b9e75a769f92b65e7511884ad876c
-
SHA256
8f94df76b9039677674732c514765c48b528862afeb9fbd3288d8841ee7e6085
-
SHA512
e489e7c68b89d00d7656444ef59072552e61b891d30eb7f186aa16579de6ed54f46871de9cc7c3d0fd917b33a46d1d7084d61b58c1ed75c51aded2bba1fad65a
-
SSDEEP
3072:Ja+4cVc/ErlSjS72/ux/ulLKMAL4KqHOzU1M:VLEvS7atKZkKq8U
Malware Config
Signatures
Files
-
8f94df76b9039677674732c514765c48b528862afeb9fbd3288d8841ee7e6085.exe windows x86
5f608268aa76aa3e1108feb3d9726fb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapValidate
HeapReAlloc
GetLocalTime
CreateFileA
HeapFree
HeapAlloc
GetCurrentProcess
WriteConsoleW
VirtualProtect
CloseHandle
GetLastError
CreateMutexA
GetModuleHandleA
GetStartupInfoA
msvcrt
malloc
strtok
gmtime
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
memset
_exit
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ