Static task
static1
Behavioral task
behavioral1
Sample
8fae09801f88861ea4f2474b3be3779f34efa701d9b27fb9048b736babd0ccc2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8fae09801f88861ea4f2474b3be3779f34efa701d9b27fb9048b736babd0ccc2.exe
Resource
win10v2004-20220812-en
General
-
Target
8fae09801f88861ea4f2474b3be3779f34efa701d9b27fb9048b736babd0ccc2
-
Size
817KB
-
MD5
9a07eb994e18cffb58d53e3fe2307071
-
SHA1
b7d2ed4e73305b096d74ff5552388b36d3c279cf
-
SHA256
8fae09801f88861ea4f2474b3be3779f34efa701d9b27fb9048b736babd0ccc2
-
SHA512
f0b5d518a8d8a03607afc1717e0d11a6dc8651d01efdf5a988aa86e09b08fad66b0b8717e037611790b6efcbaed776738b6d3edf73ebd6ed83e229e769756bae
-
SSDEEP
24576:KeginRIcZLoAX/aU7YFRy3fMzCymfRpxMxPBYWm5OZUY1IU:1LpS9+fyCyiR8NOj56U
Malware Config
Signatures
Files
-
8fae09801f88861ea4f2474b3be3779f34efa701d9b27fb9048b736babd0ccc2.exe windows x86
6ea39b695ea923bb2ddb366ce3965225
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
lstrcmpA
GetFileSize
GetCurrentThreadId
lstrcpynA
OpenMutexW
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetModuleHandleA
VirtualFree
DeleteFileW
SetThreadPriority
ReadFile
GetCurrentDirectoryA
lstrcpynA
ReadConsoleA
lstrcatA
lstrcpynA
CreateDirectoryW
FormatMessageW
VirtualProtectEx
GetCommandLineW
lstrcpynA
GetFileType
GetPrivateProfileIntA
GetDiskFreeSpaceW
lstrcpynA
certmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ