Static task
static1
Behavioral task
behavioral1
Sample
b8dc1531d38cc741902c53970265e8f2abfda94974b6ddf0623a4d6d5fe691b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b8dc1531d38cc741902c53970265e8f2abfda94974b6ddf0623a4d6d5fe691b8.exe
Resource
win10v2004-20220812-en
General
-
Target
b8dc1531d38cc741902c53970265e8f2abfda94974b6ddf0623a4d6d5fe691b8
-
Size
151KB
-
MD5
e53cececf4736f7a9cc67027443d54cd
-
SHA1
a593de8b4c1b457cc6ca9352c15f62b8a77b6c82
-
SHA256
b8dc1531d38cc741902c53970265e8f2abfda94974b6ddf0623a4d6d5fe691b8
-
SHA512
622dc83511842f471b06ad4af3365fcf7c865d6967900c47fd5aba02b93f0fd18de0f3dfeb17efae6ab33b21036575ec9ec004c37aae3477ba2e3d7825d62d0b
-
SSDEEP
3072:CmhVK7taJ7urwem1YsZcuafa4zpBsYp6AiMzykwusYZ5:CmvKsJqUD1Y6cJfKAiMekvJD
Malware Config
Signatures
Files
-
b8dc1531d38cc741902c53970265e8f2abfda94974b6ddf0623a4d6d5fe691b8.exe windows x86
d588a31439a49e32e9245b77feba18b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessVersion
GetCurrentProcessId
GetProcessWorkingSetSize
UpdateResourceW
GetCommMask
EnumSystemLocalesW
WriteConsoleOutputCharacterW
CreateHardLinkA
EraseTape
GetModuleHandleA
GetStartupInfoA
DeleteVolumeMountPointW
GetCurrentProcess
EnumTimeFormatsW
FindNextFileW
RaiseException
EnumResourceNamesW
SetProcessWorkingSetSize
version
GetFileVersionInfoA
VerLanguageNameW
user32
FindWindowA
UnregisterClassW
UnionRect
GetWindowContextHelpId
LockSetForegroundWindow
msvcrt
__p__commode
_acmdln
_exit
_except_handler3
__setusermatherr
_controlfp
sprintf
__set_app_type
__getmainargs
_initterm
__p__fmode
_XcptFilter
exit
_adjust_fdiv
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ