Static task
static1
Behavioral task
behavioral1
Sample
d8d40bbaa0497634010cc8234daaf21f60e0814e69ff75ad1db5cc790b4ac11c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d8d40bbaa0497634010cc8234daaf21f60e0814e69ff75ad1db5cc790b4ac11c.exe
Resource
win10v2004-20221111-en
General
-
Target
d8d40bbaa0497634010cc8234daaf21f60e0814e69ff75ad1db5cc790b4ac11c
-
Size
344KB
-
MD5
65467046ea7ad87f7e38fa6f85f579a6
-
SHA1
fa6b2c96b25e4e5dc3ee8d1c2e9cfadc6910fb7e
-
SHA256
d8d40bbaa0497634010cc8234daaf21f60e0814e69ff75ad1db5cc790b4ac11c
-
SHA512
cf4543e88f0aa9b03553cd5a03a2d4d2d06ab0ea685f84d9c297f787bc901913bde7e2bdbb06ebdd0ae1634e4446170a75fa4f6ef846076c6437ab6d93b2c0a5
-
SSDEEP
6144:cH57H0cOAacvwQdoJGue/7uiWuSpdgJKelr+BGadR43b6:QNUcXLwQdlhDfagJKe9EPdRAb6
Malware Config
Signatures
Files
-
d8d40bbaa0497634010cc8234daaf21f60e0814e69ff75ad1db5cc790b4ac11c.exe windows x86
8b53af7395cccfc07e9646fce6a478f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetSystemDirectoryA
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress
advapi32
ConvertSidToStringSidA
DeleteAce
CopySid
avifil32
EditStreamSetNameA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ