Static task
static1
Behavioral task
behavioral1
Sample
e8dd60e265c6c6d7fd6e1398b520e79ddfae0f5035b01ca28400084dc3834f5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8dd60e265c6c6d7fd6e1398b520e79ddfae0f5035b01ca28400084dc3834f5d.exe
Resource
win10v2004-20221111-en
General
-
Target
e8dd60e265c6c6d7fd6e1398b520e79ddfae0f5035b01ca28400084dc3834f5d
-
Size
302KB
-
MD5
efadde612f5bcbd9040d8db1b1093dfa
-
SHA1
59ea49bbcb2a6003f0646f16cc7ae12827bf16bb
-
SHA256
e8dd60e265c6c6d7fd6e1398b520e79ddfae0f5035b01ca28400084dc3834f5d
-
SHA512
592a323d78824d43a09cf5aa7a7072f90abf59d3f3275f790bc82f679e91f36a8e6d82d25f2083245ea7eea61bd8bb0e7aefd5a3a5eaa20d7587d6e89d8f95d2
-
SSDEEP
6144:McpH9TlQSPyv5qye/fXBgGFlQnV1RcnWgB9Dh:Fpd5QSmVUXaUQV1mnWQl
Malware Config
Signatures
Files
-
e8dd60e265c6c6d7fd6e1398b520e79ddfae0f5035b01ca28400084dc3834f5d.exe windows x86
c89df5ba180257aea00710166b5abd7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleW
CreateSemaphoreA
Sleep
GetFileAttributesA
GetTickCount
SetLastError
CreateDirectoryW
GetProcessHeap
GetStdHandle
OpenSemaphoreA
GetPriorityClass
LoadLibraryA
SetEvent
HeapSize
GlobalFree
MapViewOfFile
GetLocalTime
GetFileSize
SetLastError
CreateFileA
VirtualProtect
CreateMutexW
GetStartupInfoA
DeleteFileW
CreateHardLinkW
userenv
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
FindServices
SsdpCleanup
CleanupCache
SsdpStartup
Sections
.text Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE