Static task
static1
Behavioral task
behavioral1
Sample
486ae364178bb4d8d1cf2e4e5fc32e62e553004d00bb2b193b15807a0d0b5472.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
486ae364178bb4d8d1cf2e4e5fc32e62e553004d00bb2b193b15807a0d0b5472.exe
Resource
win10v2004-20220901-en
General
-
Target
486ae364178bb4d8d1cf2e4e5fc32e62e553004d00bb2b193b15807a0d0b5472
-
Size
816KB
-
MD5
9ebae22f2d4c07ea7e1a71e19cda2fd4
-
SHA1
625ee4257e05cabadf62a4bfbb44634f81cdc133
-
SHA256
486ae364178bb4d8d1cf2e4e5fc32e62e553004d00bb2b193b15807a0d0b5472
-
SHA512
795f941f88099a1b601cbcc382833128bb1b9b2c7075e5c1427ec3d91ef636e385a840f1435600f2fbd5eeb848e6124fc77877dc09c2927e610e02b89a49a8fc
-
SSDEEP
24576:trZUMjH/MTbb+tkxdv0lWnq7RfOenrs0:RuMjUfUMdslGq9j
Malware Config
Signatures
Files
-
486ae364178bb4d8d1cf2e4e5fc32e62e553004d00bb2b193b15807a0d0b5472.exe windows x86
bd363f4af42fb234328e88f7cff7cd5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
LoadLibraryA
GetLastError
GetLastError
GetFileTime
OpenMutexW
GetLastError
GetVolumeInformationW
GetLastError
VirtualAlloc
GetCurrentDirectoryW
lstrlenA
MoveFileA
GetLastError
GetLastError
GetVolumePathNameW
GetLastError
netshell
HrRenameConnection
HrLaunchConnection
HrCreateDesktopIcon
HrGetIconFromMediaType
Sections
.play Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE