Static task
static1
Behavioral task
behavioral1
Sample
b8dfd1c4f611f0d970ce8faddfb56b46cafcca9dfb5d46739275e2547dc4bfa7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b8dfd1c4f611f0d970ce8faddfb56b46cafcca9dfb5d46739275e2547dc4bfa7.exe
Resource
win10v2004-20220812-en
General
-
Target
b8dfd1c4f611f0d970ce8faddfb56b46cafcca9dfb5d46739275e2547dc4bfa7
-
Size
64KB
-
MD5
1197c758547a33a310271ef48caa9430
-
SHA1
c3caafe8ce4b043253e69ca263f311175707b1bd
-
SHA256
b8dfd1c4f611f0d970ce8faddfb56b46cafcca9dfb5d46739275e2547dc4bfa7
-
SHA512
6ded42389865615474c66542147229c3c598424bc9edf05c29d88e5794dd9ebc98c54ede00bf18614e97c6c0482eb656dfea4ee309c7b6d2e9a06f14baee524d
-
SSDEEP
768:TQE9kcZCktAl+tgXZ2JapBGgRq9ldcsaSObZLaKY/72GExm:kml9gXZZpo/ZaSObRlYT2G8m
Malware Config
Signatures
Files
-
b8dfd1c4f611f0d970ce8faddfb56b46cafcca9dfb5d46739275e2547dc4bfa7.exe windows x86
055e0a0c997f75612792a7b3d726c49b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
GetModuleHandleA
SetCurrentDirectoryA
FindNextVolumeA
SetLastError
SetConsoleTitleA
GetStdHandle
VirtualAllocEx
GetModuleFileNameA
GetVolumePathNameW
GetStartupInfoW
GetLocaleInfoA
GetProcessHeap
IsValidLocale
lstrcpyW
CreateEventA
lstrlenW
lstrcpyW
lstrcpyW
lstrcpyW
DeleteFileA
lstrcpyW
FindFirstVolumeA
untfs
ChkdskEx
Extend
Recover
Format
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RData Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ