Static task
static1
Behavioral task
behavioral1
Sample
344f7d18b3961fc2cd768056c6dbb67a7713e23b1650fcdb2e009c9c40f66d08.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
344f7d18b3961fc2cd768056c6dbb67a7713e23b1650fcdb2e009c9c40f66d08.exe
Resource
win10v2004-20220812-en
General
-
Target
344f7d18b3961fc2cd768056c6dbb67a7713e23b1650fcdb2e009c9c40f66d08
-
Size
304KB
-
MD5
280383220733605f235b55bcdb74e7c0
-
SHA1
26b6c6956210b4c8c43bd66801e1934c9f72ac18
-
SHA256
344f7d18b3961fc2cd768056c6dbb67a7713e23b1650fcdb2e009c9c40f66d08
-
SHA512
8ff3e4e5401a7cfe6e3f3a6e62ad8d94947fb073f4d2aeec82a8455c6f44b8cbcddfdf3828fb7e831edb47d118f25494b838fdab831dd3d719ab382dd4a1acd3
-
SSDEEP
6144:m0DMFsmx5X68tWtgx1pfCxg92ZCCRteTMaRukJqcWYXnVGtZ:NiRsPVxgSRtbQocWYXnQ
Malware Config
Signatures
Files
-
344f7d18b3961fc2cd768056c6dbb67a7713e23b1650fcdb2e009c9c40f66d08.exe windows x86
8e6c7cda22a7da75a027d9f0a89dd96a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateFileA
GetFullPathNameW
SetEnvironmentVariableA
GetShortPathNameA
CreateEventW
CreateMailslotW
GetModuleHandleA
CreatePipe
GetStringTypeW
CreateSemaphoreW
SetVolumeLabelA
Sleep
GetCurrentDirectoryW
FatalExit
CopyFileW
WriteConsoleA
VirtualFree
FindClose
CreateFileMappingW
FindClose
GetFullPathNameW
FindClose
mshtml
DllGetClassObject
DllCanUnloadNow
ShowModalDialog
PrintHTML
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ