Static task
static1
Behavioral task
behavioral1
Sample
69835c8351465fdce2156aacfff82f0a874b9659247262f29367115de3ec8a03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69835c8351465fdce2156aacfff82f0a874b9659247262f29367115de3ec8a03.exe
Resource
win10v2004-20220812-en
General
-
Target
69835c8351465fdce2156aacfff82f0a874b9659247262f29367115de3ec8a03
-
Size
402KB
-
MD5
0442b5b2b7f1bb88761cf8a102c85b90
-
SHA1
5e7c98ee83cf1872a6cffeefe1c62e8e441f3578
-
SHA256
69835c8351465fdce2156aacfff82f0a874b9659247262f29367115de3ec8a03
-
SHA512
2b07373da61df890965a096b739a9cd62d725a8428de997d26a51df501d98ec96655239b957f346a0d54414f88d0b1160b1ef681fcb74d317336773908ac402b
-
SSDEEP
6144:XqCk/01RkpiwSo+BHdI3xrwwje7RVJfTXa6f3+Cfm7SIsJthp62cB46zLpfwf8:Y/0vgcgwZq6f3+CbvJ/plcNzLpfwf8
Malware Config
Signatures
Files
-
69835c8351465fdce2156aacfff82f0a874b9659247262f29367115de3ec8a03.exe windows x86
829188ebabb86a164ca7c1ba405d6920
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotA
FatalExit
WriteConsoleW
VirtualAlloc
DeleteFileA
GetModuleHandleW
GetModuleHandleA
CreateFileMappingW
SetCurrentDirectoryA
GetShortPathNameA
DeviceIoControl
CreatePipe
DeleteFileA
GetConsoleAliasA
SetVolumeLabelA
CreateSemaphoreW
DeleteFileA
GetProcessHeap
GetStringTypeW
SetEnvironmentVariableA
InterlockedExchange
InitializeCriticalSection
GetACP
mshtml
ShowModalDialog
ShowModelessHTMLDialog
DllEnumClassObjects
ShowHTMLDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrs Size: 393KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ