Static task
static1
Behavioral task
behavioral1
Sample
8e36a8b21c8865db8aef2d50808725cfaf011c73f2f6b53d6eb03743bc75254f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8e36a8b21c8865db8aef2d50808725cfaf011c73f2f6b53d6eb03743bc75254f.exe
Resource
win10v2004-20220812-en
General
-
Target
8e36a8b21c8865db8aef2d50808725cfaf011c73f2f6b53d6eb03743bc75254f
-
Size
49KB
-
MD5
44f8f1091f335100af8554e95b37493c
-
SHA1
99ec145d9d559d2bc1e48bb9e30b0d9fbf69162d
-
SHA256
8e36a8b21c8865db8aef2d50808725cfaf011c73f2f6b53d6eb03743bc75254f
-
SHA512
18d3fc53d5e8197403751b76d57fce2a929fb69079b178536cc0dc5d4509bc763c47af305cb39def310961790c9054a2b63c6825608860893c3153f8c234a645
-
SSDEEP
1536:ILEkXD4GbpYvkmI6CAR2pZ/CjkF9sLyZBC9C:GcGbIkrKo5eLc1
Malware Config
Signatures
Files
-
8e36a8b21c8865db8aef2d50808725cfaf011c73f2f6b53d6eb03743bc75254f.exe windows x86
4817e21537906954e3fc2c9754b00568
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
TranslateMessage
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CoCreateGuid
oleaut32
VariantClear
Sections
.text Size: 42KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE