Static task
static1
Behavioral task
behavioral1
Sample
8cf5480e62fdc25579f8b77b15945a8df485e7f741c8d0982ce43962eba18696.exe
Resource
win7-20220812-en
General
-
Target
8cf5480e62fdc25579f8b77b15945a8df485e7f741c8d0982ce43962eba18696
-
Size
353KB
-
MD5
e1c977ff07875280a8d14f69546c5a0b
-
SHA1
390db57eb12b8bee5bc4e71f9d4a0a647b09cb71
-
SHA256
8cf5480e62fdc25579f8b77b15945a8df485e7f741c8d0982ce43962eba18696
-
SHA512
593d742d51e68da5f3852ca8f7cb5bfbf9bb546e594052ec72843f0061821d010c0b7781f4e513003dc97d0919f25a76162e3a10fe026a11c6eb21ba48e2bcd8
-
SSDEEP
6144:OxoXf3kubIutG5aiN7WPLo5OVFbIqn2ttsLqfcrSEgdGHDskf588g/PNsx3MmfGL:OxoXPkub7tHiNKTueLqfcrSEgUjscY3L
Malware Config
Signatures
Files
-
8cf5480e62fdc25579f8b77b15945a8df485e7f741c8d0982ce43962eba18696.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsr. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE