Static task
static1
Behavioral task
behavioral1
Sample
c8af3e0d3518d3c845b9c73bba061e4894bbda85b67c0e559f801699cefd7d1f.exe
Resource
win7-20220812-en
General
-
Target
c8af3e0d3518d3c845b9c73bba061e4894bbda85b67c0e559f801699cefd7d1f
-
Size
960KB
-
MD5
8b148fbea30ea15985405d9e0824df05
-
SHA1
408215da3ff712e3e05bbea4ccf45a2890e3b764
-
SHA256
c8af3e0d3518d3c845b9c73bba061e4894bbda85b67c0e559f801699cefd7d1f
-
SHA512
c89700542f751282557ebbcb556746c17fa57256ca451573e71f9e137d2ef10dabf9523a1606cf5787e17d1e0ef48bb37b00155231c7bb8f3e660929c5b07278
-
SSDEEP
24576:wHGaDf4XzkytNVpZ5HpK+MrVoYCt6Tep2p9xr68JXGLht46:KGaz4jkYNVpZ5HpQVocTDbxlAhL
Malware Config
Signatures
Files
-
c8af3e0d3518d3c845b9c73bba061e4894bbda85b67c0e559f801699cefd7d1f.exe windows x86
de58df90ff8172bd6e5c477a782aa311
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
lstrcatA
GetModuleHandleA
GetStartupInfoA
msvcrt
fclose
fread
rewind
ftell
fseek
fopen
strcpy
calloc
free
fwrite
strstr
strcmp
memset
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
malloc
strlen
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 491B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ