Static task
static1
Behavioral task
behavioral1
Sample
18171270098ff20cc6d790154b87b0d51bf168eab7860a17ea3d0dd544bf4724.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18171270098ff20cc6d790154b87b0d51bf168eab7860a17ea3d0dd544bf4724.exe
Resource
win10v2004-20220812-en
General
-
Target
18171270098ff20cc6d790154b87b0d51bf168eab7860a17ea3d0dd544bf4724
-
Size
822KB
-
MD5
5a34738773c0ebf630fb818b4e57bd86
-
SHA1
bfff4e9f07c69c6bd6b0ccc2401ccf480a424add
-
SHA256
18171270098ff20cc6d790154b87b0d51bf168eab7860a17ea3d0dd544bf4724
-
SHA512
b3425964131223b343c3334b371ba3111bb126e6f15bf9782bf6553e34766978c83af412e9e78c058f7cf125df66429072b82853e7a6c01913718ee04bbcaf35
-
SSDEEP
24576:XVkVlbTZohKM8SFHu+w1AzClo6Twk4GDgY7:UohKM3FHlwXlo6Twhi7
Malware Config
Signatures
Files
-
18171270098ff20cc6d790154b87b0d51bf168eab7860a17ea3d0dd544bf4724.exe windows x86
4add5281dce1c1f907cfb5ab2881e6e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileType
CompareStringW
GetTimeFormatA
ReadConsoleW
CreateMailslotW
lstrcatA
HeapFree
GetProcessHeap
GetCurrentDirectoryA
VirtualProtectEx
GetVolumeInformationA
GetModuleHandleA
WriteFile
GetLastError
GetDiskFreeSpaceW
GetPrivateProfileIntW
GetSystemTime
lstrcmpW
GetEnvironmentVariableW
dmdskmgr
?namecmp@@YGHPBG0@Z
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ