Static task
static1
Behavioral task
behavioral1
Sample
8404e9ad0e5b4c300385e78ef5fed933b0d4454d9d2b58502f094ce8c108ca90.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8404e9ad0e5b4c300385e78ef5fed933b0d4454d9d2b58502f094ce8c108ca90.exe
Resource
win10v2004-20221111-en
General
-
Target
8404e9ad0e5b4c300385e78ef5fed933b0d4454d9d2b58502f094ce8c108ca90
-
Size
55KB
-
MD5
9fbc36271754f17a018956dbe7599f22
-
SHA1
b9f722d8d578ff65bdb62ea1afd988f9535f7af9
-
SHA256
8404e9ad0e5b4c300385e78ef5fed933b0d4454d9d2b58502f094ce8c108ca90
-
SHA512
8a7e3fedf9c78c2144ddd5617e06e46c38db23367127f4913c0cdaeadeb1f1f91d7371202a5ad8d17421eda25fae39e98e1df45eff32af30385e88b43661e738
-
SSDEEP
1536:0ZOOOAu//EwR+g8EDDHnj18vVCRzqzUbCY8W2PX2D:EpEPROVCRzqz42/i
Malware Config
Signatures
Files
-
8404e9ad0e5b4c300385e78ef5fed933b0d4454d9d2b58502f094ce8c108ca90.exe windows x86
48e4ef355d6879a1e1395512fbeb5276
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadModule
GetCommandLineW
QueryPerformanceFrequency
UnregisterConsoleIME
FindNextVolumeMountPointW
ExpungeConsoleCommandHistoryW
GetTempFileNameA
OpenDataFile
HeapWalk
TlsAlloc
GlobalFindAtomA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE