Static task
static1
Behavioral task
behavioral1
Sample
d0e5fdfce2e4d593c33a9ede752218ff707b78d6b0008e9d5fd5f04a01dbe511.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0e5fdfce2e4d593c33a9ede752218ff707b78d6b0008e9d5fd5f04a01dbe511.exe
Resource
win10v2004-20220812-en
General
-
Target
d0e5fdfce2e4d593c33a9ede752218ff707b78d6b0008e9d5fd5f04a01dbe511
-
Size
301KB
-
MD5
90375d6f4609762178bfff4cf8c26128
-
SHA1
e94a3f3e650a6dc2fef3a5d4de5d1988c9ec4f1a
-
SHA256
d0e5fdfce2e4d593c33a9ede752218ff707b78d6b0008e9d5fd5f04a01dbe511
-
SHA512
611e441172c6f1e1df76c55c4a71f9b1326b950aea4c89c76b164dcba26397f1aa675a3703867fbcbcd905bc7b82079ce64c8b4678e8ba193b680379f3c15451
-
SSDEEP
6144:XNuRO5JtJH+vvOh1R48zsY3IqgOUYAVUpFAz8TwViigqHnih:XKO7H+v2HTswvUYJAYgHih
Malware Config
Signatures
Files
-
d0e5fdfce2e4d593c33a9ede752218ff707b78d6b0008e9d5fd5f04a01dbe511.exe windows x86
29d0b8e8ada116eaae33e5744cc3f13a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotW
GetModuleFileNameA
OpenMutexA
FileTimeToLocalFileTime
lstrcmpiW
lstrlenA
HeapCreate
Sleep
lstrcmpiW
GetProcessHeap
GetModuleHandleA
GetDriveTypeW
SetLastError
lstrcmpiW
IsValidLocale
lstrcmpiW
GetLogicalDriveStringsW
GetStdHandle
lstrcmpiW
WaitForMultipleObjects
GetVolumePathNameW
DeleteFileA
CreateNamedPipeW
scecli
SceSysPrep
SceOpenPolicy
InitializeChangeNotify
DeltaNotify
Sections
.text Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 294KB - Virtual size: 293KB
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ