Static task
static1
Behavioral task
behavioral1
Sample
8508fc5f1c4ac9f9599349ec083c4c473bb73820d58aea3593775f2c02b45fd4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8508fc5f1c4ac9f9599349ec083c4c473bb73820d58aea3593775f2c02b45fd4.exe
Resource
win10v2004-20220901-en
General
-
Target
8508fc5f1c4ac9f9599349ec083c4c473bb73820d58aea3593775f2c02b45fd4
-
Size
668KB
-
MD5
8d57f72ee752d33f427b8fee041bb329
-
SHA1
8c172a6c407284fa93e27b744102139aad842fb6
-
SHA256
8508fc5f1c4ac9f9599349ec083c4c473bb73820d58aea3593775f2c02b45fd4
-
SHA512
75db8bb51e79e15e95979990b2d267e0968f982ed39a6c07e08c93343f7db89d0a344613f9ff05399a5826be83f7331f451a28ffbf13d5ba10f304b52ba32e7d
-
SSDEEP
12288:A3VVhw6c/vUaRKU8ivqN7jFDxBYxXseKtYsRXEw4D19t/RHj:CZcpRKpiyN7Rgx8eWYsRUFbtZ
Malware Config
Signatures
Files
-
8508fc5f1c4ac9f9599349ec083c4c473bb73820d58aea3593775f2c02b45fd4.exe windows x86
18ef114d6f14e75f77ef3db8a09fa4f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_strnicmp
malloc
_snprintf
_vsnprintf
free
time
strncpy
rand
strstr
strncat
kernel32
GetStartupInfoA
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
Process32Next
ExpandEnvironmentStringsA
GetCurrentProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
LoadLibraryA
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
VirtualFreeEx
GetLastError
WriteFile
SetFilePointer
CloseHandle
CreateFileA
GetCurrentDirectoryA
LocalFree
FormatMessageA
lstrcpyA
GetTickCount
OutputDebugStringA
GetCurrentThreadId
advapi32
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 662KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE