Static task
static1
Behavioral task
behavioral1
Sample
8b0917c4451f3e214a9c4a859dc2d86a609e097a189277374b1e86b17b33311a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b0917c4451f3e214a9c4a859dc2d86a609e097a189277374b1e86b17b33311a.exe
Resource
win10v2004-20220812-en
General
-
Target
8b0917c4451f3e214a9c4a859dc2d86a609e097a189277374b1e86b17b33311a
-
Size
817KB
-
MD5
d3a92bf4110868392a772b51f5ce872c
-
SHA1
1c88c01189da5eabe6053c1b8f0984e63dbd3b7e
-
SHA256
8b0917c4451f3e214a9c4a859dc2d86a609e097a189277374b1e86b17b33311a
-
SHA512
ad4440607bb85bd02fbbabd8a95f10902e4510fd0f090cad2c08dc4cf907f0da11a38890397c88aa52e770b5062294cb0364fd232a0f71698ecc44d8c6bb741b
-
SSDEEP
24576:Y5WOsGBq6rAo4H/GsvtJV6Ip1i8XmM+nP:1GU6rCfG4LLS2x
Malware Config
Signatures
Files
-
8b0917c4451f3e214a9c4a859dc2d86a609e097a189277374b1e86b17b33311a.exe windows x86
9f5a79f8a1f1c8e40a8ffb9242abc29c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
lstrcatA
GetCurrentThreadId
SetCurrentDirectoryW
lstrlenW
GetFullPathNameW
GetCommandLineA
GetModuleFileNameW
TlsSetValue
DeleteFileW
WriteConsoleW
VirtualProtect
SetThreadPriority
ReleaseMutex
SetLocaleInfoA
GetModuleHandleA
FormatMessageA
VirtualQuery
GetPrivateProfileIntA
azroles
AzApplicationClose
AzAddPropertyItem
AzApplicationCreate
AzApplicationDelete
Sections
.text Size: 14KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ