Static task
static1
Behavioral task
behavioral1
Sample
d8bf90a49ce80fdab9bc1ce49c401f2e4c0b081326785ef0bbb11d0f37c70dad.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d8bf90a49ce80fdab9bc1ce49c401f2e4c0b081326785ef0bbb11d0f37c70dad.exe
Resource
win10v2004-20220812-en
General
-
Target
d8bf90a49ce80fdab9bc1ce49c401f2e4c0b081326785ef0bbb11d0f37c70dad
-
Size
94KB
-
MD5
c6ef68521117f1a0a62256b01ab3aeda
-
SHA1
62e2bf45861aadea11c5d6fb845bfac93c1c5e4b
-
SHA256
d8bf90a49ce80fdab9bc1ce49c401f2e4c0b081326785ef0bbb11d0f37c70dad
-
SHA512
202e6c039278661abefb49f917d7c6f08a97c745d991a3a7337f3b2cab2d3e41aa0206f2c0f1d5059d9ca9877c78a1351db4dd4be3c3dd8fe6e3b53c3ee8129d
-
SSDEEP
1536:2b9jm1XHDojf11aexyBB1/NffMLcLlc8YaEJwZK4/83ZoMOALF6SSf:25UsjvyL1/NPhZEXtpxLF6H
Malware Config
Signatures
Files
-
d8bf90a49ce80fdab9bc1ce49c401f2e4c0b081326785ef0bbb11d0f37c70dad.exe windows x86
25093809c28e284b757952c0a14b99fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcess
GetTickCount
WritePrivateProfileSectionA
DeleteTimerQueue
GetDiskFreeSpaceW
GlobalFindAtomA
LZSeek
CreateDirectoryExW
SetProcessPriorityBoost
GetVersionExA
GetOverlappedResult
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE