Static task
static1
Behavioral task
behavioral1
Sample
36563d27a349694e071f28025c8b2fb3ab88366391c3b9e88ed087d92c137439.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36563d27a349694e071f28025c8b2fb3ab88366391c3b9e88ed087d92c137439.exe
Resource
win10v2004-20220812-en
General
-
Target
36563d27a349694e071f28025c8b2fb3ab88366391c3b9e88ed087d92c137439
-
Size
118KB
-
MD5
071958f89a9b076ada5c07225715e3e0
-
SHA1
d3a12b19a0e9983b0f942499f377fee0c1ca6920
-
SHA256
36563d27a349694e071f28025c8b2fb3ab88366391c3b9e88ed087d92c137439
-
SHA512
f8fda44dc485b87775e01d59e93e6d23e6988dbfffc4d0cc50bfb57be968e3d8f1229a0bc79d01f1215cf8a9ab88e5491fe63b6f9aa92555876d53e1d4435ea7
-
SSDEEP
3072:MMWXunKv1IAO04vhO9TeiqkT3jIvE2b/Q5Vv:MWnKvauckF/gEAI5J
Malware Config
Signatures
Files
-
36563d27a349694e071f28025c8b2fb3ab88366391c3b9e88ed087d92c137439.exe windows x86
50147ec7d738132b2d71ffaed16d85ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
VirtualFree
SetEnvironmentVariableA
CreateFileA
GetModuleHandleA
GetFullPathNameW
GetCurrentDirectoryW
SetVolumeLabelA
CopyFileW
CreateSemaphoreA
FindClose
VirtualAlloc
CreateMailslotW
GetShortPathNameA
GetFullPathNameW
CreateFileMappingA
FindClose
FindClose
CreateEventW
CreatePipe
FatalExit
GetStringTypeW
Sleep
mshtml
DllGetClassObject
DllCanUnloadNow
PrintHTML
ShowModalDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ