Static task
static1
Behavioral task
behavioral1
Sample
8b3f6dc04d4f8d64c5e04c6f8b292d528cb5c94906fcbf9dec71904ef96f11d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8b3f6dc04d4f8d64c5e04c6f8b292d528cb5c94906fcbf9dec71904ef96f11d9.exe
Resource
win10v2004-20220901-en
General
-
Target
8b3f6dc04d4f8d64c5e04c6f8b292d528cb5c94906fcbf9dec71904ef96f11d9
-
Size
333KB
-
MD5
c4850ac55ea03a94e103ba5d2e3ae35c
-
SHA1
792fe31fd974279e79fe3416a42be2f94ca68887
-
SHA256
8b3f6dc04d4f8d64c5e04c6f8b292d528cb5c94906fcbf9dec71904ef96f11d9
-
SHA512
bf9e0ede8215605279ec859dd36cd49cb3c4701e7e5c3d21d4e34beda8a2ad8bd9b692d83e7832defed4ee1cd3e99c0c8a1c399e13a787431a2b63ddcfd12a4c
-
SSDEEP
6144:QJIW4JMsvY8nHmKGuRvvFuSJvbWjw960RDvbjJD2VJq4r+G:eMJMGmVuRvdnJvbWjw9601bqBf
Malware Config
Signatures
Files
-
8b3f6dc04d4f8d64c5e04c6f8b292d528cb5c94906fcbf9dec71904ef96f11d9.exe windows x86
b2f92e151b604a0c59c20b7089df0ea2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetDiskFreeSpaceA
ResumeThread
DeleteCriticalSection
CreateHardLinkA
HeapDestroy
GetLastError
SearchPathA
GetThreadLocale
VirtualProtect
GetStartupInfoA
ReleaseMutex
GetTickCount
ExitProcess
GetModuleHandleA
CloseHandle
SetEvent
Sleep
TlsGetValue
lstrcmpiA
advapi32
FreeSid
CloseTrace
LsaFreeMemory
IsValidSid
RegEnumKeyExA
GetFileSecurityA
LsaSetSecret
OpenEventLogA
RegCreateKeyExA
CloseEventLog
LsaClose
AccessCheck
RegCloseKey
RegLoadKeyA
cfgmgr32
CM_Delete_Range
CM_Add_Range
CM_First_Range
CM_Add_IDA
CM_Get_Child
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ