Static task
static1
Behavioral task
behavioral1
Sample
f8fcd375434eda1e3c0528bbf35b814ebefc591deb5585e2060a23aa23fcdf3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8fcd375434eda1e3c0528bbf35b814ebefc591deb5585e2060a23aa23fcdf3d.exe
Resource
win10v2004-20220901-en
General
-
Target
f8fcd375434eda1e3c0528bbf35b814ebefc591deb5585e2060a23aa23fcdf3d
-
Size
30KB
-
MD5
9b69ee5a2bfc37bf55537500ae451424
-
SHA1
bcd44dbe1b799d3927118a2436abb5cff5e04ae8
-
SHA256
f8fcd375434eda1e3c0528bbf35b814ebefc591deb5585e2060a23aa23fcdf3d
-
SHA512
69a7d1ad375ea5c5edc12d221ea84c255655e3aaa6ee65ff4b1a2018c2a5c6f5296dff47c7217b81143d13695409122ee5cc2831ed9f3af1c852ab0b0bf8798a
-
SSDEEP
768:z/AObw06ClYt6xMgR9YqOwfdGDI2YFp5vciq:a1ClYtzQfciq
Malware Config
Signatures
Files
-
f8fcd375434eda1e3c0528bbf35b814ebefc591deb5585e2060a23aa23fcdf3d.exe windows x86
7345f9497130be252852f565608edfb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
user32
PeekMessageA
PostThreadMessageA
wsprintfA
Sections
.text Size: 1024B - Virtual size: 663B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ha Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE