Static task
static1
Behavioral task
behavioral1
Sample
8f2fb68670f4c28035cde8510e148acd0e9fc3f2595ef9a7165b6452d4190309.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f2fb68670f4c28035cde8510e148acd0e9fc3f2595ef9a7165b6452d4190309.exe
Resource
win10v2004-20221111-en
General
-
Target
8f2fb68670f4c28035cde8510e148acd0e9fc3f2595ef9a7165b6452d4190309
-
Size
148KB
-
MD5
9eebb4ee89dbf1863b7c903b7ae9a0a3
-
SHA1
7b6a4db34f75f812f271db781f32323b74874d4a
-
SHA256
8f2fb68670f4c28035cde8510e148acd0e9fc3f2595ef9a7165b6452d4190309
-
SHA512
8f02dd6cb8dd6428e4e6927b7ed3b283e153ced623b6e7e3c3d4f54e7b7d322cb9663d6d9f72771507b130c26afd5f3576896a5a0f39c7c5c53be7dfab05b490
-
SSDEEP
3072:VWufkoFK+f7RsJSBMTb5K8coTBi4wcR/8t7If53hhlu:zkoFKWFsJ6s5xr98t7eNu
Malware Config
Signatures
Files
-
8f2fb68670f4c28035cde8510e148acd0e9fc3f2595ef9a7165b6452d4190309.exe windows x86
04c9dad1102153696a563b0724502821
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA
msvcrt
strrchr
tmpnam
wcsspn
strcspn
wcstombs
Sections
.flat Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 90KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE