Static task
static1
Behavioral task
behavioral1
Sample
8f1043a63d758573c09e9eab131f3c87afd609e0fdc70e7f1d703d53a4c43465.exe
Resource
win7-20220901-en
General
-
Target
8f1043a63d758573c09e9eab131f3c87afd609e0fdc70e7f1d703d53a4c43465
-
Size
277KB
-
MD5
56ae21178c168588e796a787720c9a42
-
SHA1
94d835c4631caf4d8a455a53741915db924cdbf5
-
SHA256
8f1043a63d758573c09e9eab131f3c87afd609e0fdc70e7f1d703d53a4c43465
-
SHA512
b39ef145885e82ceb02e43feae04133607d60dc6261b7c05ffefa2ba3335ba47897c70948abb04b00cc141dba6a1a3f490037c516c44f0d16a8e13d60f16bce7
-
SSDEEP
6144:EespPRroPECuBz+x7oppWR0bKSYYWOesRH3s:EeUPloMaG4TV/GB
Malware Config
Signatures
Files
-
8f1043a63d758573c09e9eab131f3c87afd609e0fdc70e7f1d703d53a4c43465.exe windows x86
ea215a2e6009dd09cfb25a8460bf9f36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalReAlloc
GetTempPathA
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
GlobalFree
lstrlenA
ExitProcess
DeleteFileA
GetExitCodeProcess
Sleep
GetCommandLineA
GetVersionExA
GetCurrentProcessId
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
user32
wsprintfA
shell32
ShellExecuteExA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 814B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ