Static task
static1
Behavioral task
behavioral1
Sample
c8cd1ab79e166cde2a3c6a425c310330c77c2e3cf1ec7132851e77af4d5a6b42.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8cd1ab79e166cde2a3c6a425c310330c77c2e3cf1ec7132851e77af4d5a6b42.exe
Resource
win10v2004-20221111-en
General
-
Target
c8cd1ab79e166cde2a3c6a425c310330c77c2e3cf1ec7132851e77af4d5a6b42
-
Size
253KB
-
MD5
c1f7779b06f004bfc89b458ab254e013
-
SHA1
5a63e8c50d6ca037ef6bdb1f7557d6a467148335
-
SHA256
c8cd1ab79e166cde2a3c6a425c310330c77c2e3cf1ec7132851e77af4d5a6b42
-
SHA512
9726074debd9b33a9b129e3df93c654b5ac4d107e0f9142a2752039a8d7640d47f1c8519f8b1b710544627136646114dd2831e5bb18d91fe4927240323ac78f7
-
SSDEEP
6144:9mWIW36Gf6PlHjXeIpcteFn4iCP9a0i1zzJeVgFv0kDY9:MWIWqGf61WtVVaL1zznFskY
Malware Config
Signatures
Files
-
c8cd1ab79e166cde2a3c6a425c310330c77c2e3cf1ec7132851e77af4d5a6b42.exe windows x86
a7eaac069d48c38b338a6083f98f67de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LoadLibraryW
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA
advapi32
RegOpenKeyExW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ