Static task
static1
Behavioral task
behavioral1
Sample
c8b73a73bd6ea6fa826c912bf6d7a6ffc5a96f155af5cc4782d705edb47abd8f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c8b73a73bd6ea6fa826c912bf6d7a6ffc5a96f155af5cc4782d705edb47abd8f.exe
Resource
win10v2004-20220812-en
General
-
Target
c8b73a73bd6ea6fa826c912bf6d7a6ffc5a96f155af5cc4782d705edb47abd8f
-
Size
82KB
-
MD5
29654dde4e06044468c957f25c43c873
-
SHA1
2ba8f53ddf73843a6d06115a40e8a159292f445f
-
SHA256
c8b73a73bd6ea6fa826c912bf6d7a6ffc5a96f155af5cc4782d705edb47abd8f
-
SHA512
48e659068de72bf16cd12c167e98035166f7472d07919c74b91e2acee0dca24db4b28c45cf7c6fc7f5b86956a20195b885fd7e972afb37ac4e6464b7f2d82fbf
-
SSDEEP
1536:sndcJ/b4Zs8aJRxqwHS+YQoWpXI4WsnFsvglGbGuG+yVCgvOtTtN:sFy8aJ1gxWpYinv0b1yVzOtJN
Malware Config
Signatures
Files
-
c8b73a73bd6ea6fa826c912bf6d7a6ffc5a96f155af5cc4782d705edb47abd8f.exe windows x86
8224a5dcb45410abe7c9b4b4486398c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetProcAddress
LoadLibraryA
VirtualProtect
GetCurrentProcessId
LockResource
CreateFileA
LoadResource
FindResourceA
VirtualAlloc
VirtualFree
HeapFree
GetProcessHeap
VirtualProtectEx
VirtualAllocEx
GetCurrentProcess
ExitProcess
SetEvent
GetModuleHandleA
ExitThread
HeapAlloc
InterlockedExchange
RtlUnwind
VirtualQuery
ole32
CoCreateInstance
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ