Static task
static1
Behavioral task
behavioral1
Sample
8f612683b4963c45cdbc49f9ce4d7536a5e0c29985cdcd4a80959d52c36ec967.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f612683b4963c45cdbc49f9ce4d7536a5e0c29985cdcd4a80959d52c36ec967.exe
Resource
win10v2004-20221111-en
General
-
Target
8f612683b4963c45cdbc49f9ce4d7536a5e0c29985cdcd4a80959d52c36ec967
-
Size
348KB
-
MD5
4dbef91136e41751371a8c6dc66ac0c2
-
SHA1
9f3da232bf2a40be8558f5ac087ddba8c54eec3c
-
SHA256
8f612683b4963c45cdbc49f9ce4d7536a5e0c29985cdcd4a80959d52c36ec967
-
SHA512
3f24cb117865550575f152cdbf35b2d191e6434c3d847b8d3fe871c2dd000bbbdc3e8a9a22efabf13474d45d93e686dc9f84ec9616d05cf50f84eafa5e75c079
-
SSDEEP
6144:eEpkDGwTs0YonhOCVx66tCnFbhiw1JateMEpcpKncvtKRgYQoTb:Us0Yoh776HnFFiAGEpc1WgYNT
Malware Config
Signatures
Files
-
8f612683b4963c45cdbc49f9ce4d7536a5e0c29985cdcd4a80959d52c36ec967.exe windows x86
3cf43237e642f6bdcec2637d401a8ff3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LocalLock
GetSystemTime
GetSystemDirectoryA
GetLastError
VirtualFree
CloseHandle
UnmapViewOfFile
lstrlenA
GetModuleHandleA
WaitForSingleObject
GetProcAddress
HeapDestroy
GetCommandLineA
user32
wsprintfA
advapi32
AddAce
CopySid
ole32
CoUninitialize
avifil32
AVIStreamCreate
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 755KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ