Static task
static1
Behavioral task
behavioral1
Sample
c8030457268fc45c53b4e90bfb62547124802ff4d46e90cd128837198410a08b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8030457268fc45c53b4e90bfb62547124802ff4d46e90cd128837198410a08b.exe
Resource
win10v2004-20220812-en
General
-
Target
c8030457268fc45c53b4e90bfb62547124802ff4d46e90cd128837198410a08b
-
Size
308KB
-
MD5
04ad1370a5ebba2f9ef6df9a442f70d1
-
SHA1
3b0ee329e3f4ee6649644682f868596f766a10d1
-
SHA256
c8030457268fc45c53b4e90bfb62547124802ff4d46e90cd128837198410a08b
-
SHA512
a5b085d3401882ed9a53ba42a1432dc7c54f25fc60dd62ffaa7eae703f2ff7e7d23e4813bfec3e13c42e0cdceb8b79f9319b9a29dc3c9d00618c6e438cec1664
-
SSDEEP
6144:bSEK6brSyzOvWBldqyBtlCUBybv1pX1sDko7ZPjVA:5KkkvWjd3tbSpX1WZNq
Malware Config
Signatures
Files
-
c8030457268fc45c53b4e90bfb62547124802ff4d46e90cd128837198410a08b.exe windows x86
a9d9075485b0cb0ba25cdfa862680f98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetCurrentProcessId
EnumCalendarInfoW
GetFileAttributesA
GetCurrentThreadId
GetDriveTypeW
lstrlenA
FindAtomW
ReadFile
GetPrivateProfileStringW
SetLastError
LocalFree
ResumeThread
GetModuleFileNameA
HeapCreate
GetConsoleAliasW
CreateMailslotA
SetEvent
GetModuleHandleA
FindClose
user32
GetSysColor
GetKeyboardType
GetMenuInfo
GetCursorInfo
GetClientRect
DispatchMessageA
GetKeyState
SetFocus
DrawTextW
IsWindow
CallWindowProcW
GetClassInfoA
DispatchMessageA
admparse
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ