Static task
static1
Behavioral task
behavioral1
Sample
51ee88eaf6d069e904d211e9a187f95c0b8c5a6e41ebcd8a19677565b84d3ed5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
51ee88eaf6d069e904d211e9a187f95c0b8c5a6e41ebcd8a19677565b84d3ed5.exe
Resource
win10v2004-20220812-en
General
-
Target
51ee88eaf6d069e904d211e9a187f95c0b8c5a6e41ebcd8a19677565b84d3ed5
-
Size
301KB
-
MD5
6a3be3a22c223377686b3bb43219c380
-
SHA1
b4c58a0f1d69772a91e5b55ce63e42b9e4f0fce3
-
SHA256
51ee88eaf6d069e904d211e9a187f95c0b8c5a6e41ebcd8a19677565b84d3ed5
-
SHA512
ba72cfde71328c93d8c5999fede8f5437e78592641a75a5c060234c47e67f32f00c43a87487c846fd72fbdec9a12798a3dacf426600f4be1825f1851de34d906
-
SSDEEP
6144:mQWrXHqKCft0OlVPIyUnwCglG/0rwOUA50xISNJf:mQWzEt0gYwLa04I0xIK5
Malware Config
Signatures
Files
-
51ee88eaf6d069e904d211e9a187f95c0b8c5a6e41ebcd8a19677565b84d3ed5.exe windows x86
dd16a1d8be799240a8d3c5d88efd5b56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
CreateMailslotA
ResetEvent
ReadConsoleW
HeapSize
ReleaseMutex
GetDriveTypeW
GetFileAttributesA
IsBadWritePtr
RemoveDirectoryA
CreateDirectoryA
SetLocalTime
CancelIo
GetCommandLineA
SetLastError
GetModuleHandleA
GetStdHandle
DeleteFileA
GetLocaleInfoA
WriteFile
VirtualProtect
user32
GetWindowTextW
DrawIcon
DestroyMenu
GetWindowLongW
LoadCursorA
PostMessageA
GetCaretPos
GetCapture
PeekMessageA
wsprintfA
SetFocus
DispatchMessageA
SetCursor
filemgmt
DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ