Static task
static1
Behavioral task
behavioral1
Sample
2810189da6ce0e8fa78ce061089608f413fef1b876ffef6290e29a890006e79e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2810189da6ce0e8fa78ce061089608f413fef1b876ffef6290e29a890006e79e.exe
Resource
win10v2004-20221111-en
General
-
Target
2810189da6ce0e8fa78ce061089608f413fef1b876ffef6290e29a890006e79e
-
Size
306KB
-
MD5
e9e49ca7ccfb9666fdc620fd45859c76
-
SHA1
32fce03ad57b868497caf3f5b9d4edec9766d5dc
-
SHA256
2810189da6ce0e8fa78ce061089608f413fef1b876ffef6290e29a890006e79e
-
SHA512
da5223dcb0210c9c759a4f9390a258961bdfa08b1d06cc3cf3aa20d49edc9fb5a77dde71b4cbf6141f96970b6b2e8b84946a3c9419bd7daa299a3a23466c65cb
-
SSDEEP
6144:592lnHHnHrLrLLrLrDm2LjLjLNhXu61UpfEbh7DHi4ce+FTtAWy5jog/llhjRf5t:jKLjLjLNhXu2UUa5HXgTHfU+
Malware Config
Signatures
Files
-
2810189da6ce0e8fa78ce061089608f413fef1b876ffef6290e29a890006e79e.exe windows x86
3fe6ddaa55dd9ab4e3d49f19d5ad3c06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotA
GetShortPathNameW
GetStringTypeW
SetCurrentDirectoryA
GetModuleHandleW
DeleteFileA
VirtualAlloc
WriteConsoleW
DeviceIoControl
GetConsoleAliasA
SetEnvironmentVariableA
GetStringTypeW
CreateSemaphoreW
CreateFileMappingW
DeleteFileA
GetACP
GetProcessHeap
FatalExit
CreatePipe
LoadLibraryA
DeleteFileA
InitializeCriticalSection
SetVolumeLabelW
mshtml
ShowModalDialog
DllEnumClassObjects
ShowHTMLDialog
ShowModelessHTMLDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE