Static task
static1
Behavioral task
behavioral1
Sample
268454d0edc8ef4ab1aa22b67d09101badc7945aaeeb1b3f1f9b74bfa2978ed8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
268454d0edc8ef4ab1aa22b67d09101badc7945aaeeb1b3f1f9b74bfa2978ed8.exe
Resource
win10v2004-20220812-en
General
-
Target
268454d0edc8ef4ab1aa22b67d09101badc7945aaeeb1b3f1f9b74bfa2978ed8
-
Size
303KB
-
MD5
d8027ba768b6d32564abbd0c7d757545
-
SHA1
968631e477b9e1ddca039c576182408a1c9c62ee
-
SHA256
268454d0edc8ef4ab1aa22b67d09101badc7945aaeeb1b3f1f9b74bfa2978ed8
-
SHA512
74d90cd38243434ea3fe94759aca4e8630154c5f7156a3bb36beb640007fcf5c0482fd607d80f14924bfa1bd091de10f4307d415df6447d1a5704d538e06af38
-
SSDEEP
6144:8yIdcbBW5HMx5XAQb8osNrIpJ2h9VFwiYqeQROlf6WBflilua4ksoYqdC:adcbBAHMx5Q88u0j+iYqeQQZ6WBY4j
Malware Config
Signatures
Files
-
268454d0edc8ef4ab1aa22b67d09101badc7945aaeeb1b3f1f9b74bfa2978ed8.exe windows x86
4d771e3ae83825831809274e32021ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetLogicalDriveStringsW
CreateEventA
lstrcpyW
DeleteFileA
lstrcpyW
GetProcessHeap
GetVolumePathNameW
GetCommState
GetStdHandle
SetLastError
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
FileTimeToLocalFileTime
lstrlenW
lstrcpyW
lstrcpyW
IsValidLocale
GetConsoleAliasW
lstrcpyW
LoadLibraryA
VirtualAllocEx
tapi3
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
Sections
.text Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ORPC Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ADATA Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE