Static task
static1
Behavioral task
behavioral1
Sample
8ebb3d440b07ae3a6165462457b68c80fd2cbcf3bf2284bc3588c86985a949fd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ebb3d440b07ae3a6165462457b68c80fd2cbcf3bf2284bc3588c86985a949fd.exe
Resource
win10v2004-20220812-en
General
-
Target
8ebb3d440b07ae3a6165462457b68c80fd2cbcf3bf2284bc3588c86985a949fd
-
Size
91KB
-
MD5
d56f8a007575fe4906c692242910aeed
-
SHA1
55381b7ac803a4e3c2c812846b0cd99c9138aa82
-
SHA256
8ebb3d440b07ae3a6165462457b68c80fd2cbcf3bf2284bc3588c86985a949fd
-
SHA512
7964644c531e942cd52a1c5bc2c72e878d9a47426f1b30cbe784eac75b5a47d5dda91629330b7079420a356fd4c5e4aca7446ebd9703dc2d18dd931a8e47007a
-
SSDEEP
1536:GivRrdyaEAM3xPugt/XUYRwfPqeh+WN2g1Q3LATjiM1P8HygLPM02f:Givpgp3cMcYdWNZ1oL6Z1EHD2f
Malware Config
Signatures
Files
-
8ebb3d440b07ae3a6165462457b68c80fd2cbcf3bf2284bc3588c86985a949fd.exe windows x86
31d40d0b0f88592143dd41b58cae2bc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42u
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord2977
ord3142
ord3254
ord4480
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord4075
ord4616
ord4418
ord3733
ord561
ord825
ord815
ord1165
ord6371
ord4221
ord1569
ord4459
ord4667
msvcrt
_except_handler3
__dllonexit
_onexit
_controlfp
__set_app_type
wcscpy
strcat
__CxxFrameHandler
wcscmp
__p__fmode
wcscat
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
kernel32
GetModuleFileNameW
GetStartupInfoW
GetModuleHandleW
shell32
SHGetFolderPathW
SHGetFolderPathA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathFileExistsA
msvcp60
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ