Static task
static1
Behavioral task
behavioral1
Sample
a4462aa277b26a44ca5099a89735a9f7706cc3d5483582aada20d83823731e16.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4462aa277b26a44ca5099a89735a9f7706cc3d5483582aada20d83823731e16.exe
Resource
win10v2004-20220812-en
General
-
Target
a4462aa277b26a44ca5099a89735a9f7706cc3d5483582aada20d83823731e16
-
Size
300KB
-
MD5
a34a036c905970bbb1b53a73e9be1708
-
SHA1
c5f8fe99704fc361ddd2000ceb537288c21ca1e3
-
SHA256
a4462aa277b26a44ca5099a89735a9f7706cc3d5483582aada20d83823731e16
-
SHA512
a23e95ee27af1ef557209d6f1e4c1421946172a69ecfb0a931d98b36ac051203f4a5aeddefeccdf42e3277026b481e304fec2d776ec3753c07d4c3768f26ebd6
-
SSDEEP
6144:HwHmgdcbBWircVQAEkvZrVCqnedFm7sdz/qYWe4ecaefdIrPOzBW:qPdcbBFwb1vZrVOlhQWcR+rPOzc
Malware Config
Signatures
Files
-
a4462aa277b26a44ca5099a89735a9f7706cc3d5483582aada20d83823731e16.exe windows x86
c574c17728b6f139b25016e8b260797b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiW
GetConsoleAliasW
FileTimeToLocalFileTime
lstrcmpiW
SetLastError
lstrlenW
CreateMailslotW
GetVolumePathNameW
GetCommState
lstrcmpiW
CreateNamedPipeW
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
GetStdHandle
HeapCreate
GetLogicalDriveStringsW
Sleep
IsValidLocale
lstrcmpiW
GetStartupInfoA
GetProcessHeap
lstrcmpiW
sqlunirl
AbortSystemShutdown_
_AppendMenu_@16
wsprintf_
_CallMsgFilter_@8
Sections
.text Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ORPC Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ