Static task
static1
Behavioral task
behavioral1
Sample
8eac4382bb4d8633a4704b083c4e73d7114186f1afc74e38d0937a7e251ca63b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8eac4382bb4d8633a4704b083c4e73d7114186f1afc74e38d0937a7e251ca63b.exe
Resource
win10v2004-20221111-en
General
-
Target
8eac4382bb4d8633a4704b083c4e73d7114186f1afc74e38d0937a7e251ca63b
-
Size
6KB
-
MD5
e797f088946bc1a2428a96c5a355ae80
-
SHA1
941bc8a4190aa268c76b9581e9afc933b92e35f0
-
SHA256
8eac4382bb4d8633a4704b083c4e73d7114186f1afc74e38d0937a7e251ca63b
-
SHA512
8564c86d80349cb2a93efbfc5efd348efaac9cbaf24b5c6d6e17e8d823e3c5acc9deb7f369206a77d2efe471c2bbc648ef077ab1aeb5f36a83afbce0ae921f0e
-
SSDEEP
96:edn50Tya1GKnsqLL5ZbKv7CTh5WTJTQmK9EfadOF/vDSulYjsoZ/FFZ5rV+fkCVD:mJKnsqfwCTSJeRoF3OulYJJ+fkCV3
Malware Config
Signatures
Files
-
8eac4382bb4d8633a4704b083c4e73d7114186f1afc74e38d0937a7e251ca63b.exe windows x86
536dca3dbd2e52d5cc21d1e5a28fb92e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
DuplicateHandle
GetCurrentProcess
ExitProcess
Sleep
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
GetThreadContext
lstrlenW
GetModuleHandleA
HeapFree
GetProcessHeap
InterlockedDecrement
HeapAlloc
GetStringTypeExA
GetThreadLocale
VirtualProtectEx
WriteProcessMemory
FlushInstructionCache
SetThreadContext
InterlockedIncrement
ResumeThread
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
user32
LoadStringA
CharNextA
wvsprintfA
shlwapi
UrlEscapeA
ole32
CoCreateGuid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 353B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE