Static task
static1
Behavioral task
behavioral1
Sample
014086e26442dc92c9c510ab9c30e2bf4b440aa2ca955bae681883747fa20166.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
014086e26442dc92c9c510ab9c30e2bf4b440aa2ca955bae681883747fa20166.exe
Resource
win10v2004-20221111-en
General
-
Target
014086e26442dc92c9c510ab9c30e2bf4b440aa2ca955bae681883747fa20166
-
Size
305KB
-
MD5
3626631089e9b332231774203289d2c0
-
SHA1
18e6efb1d0bc94b2eaee2e9f30d5494155ae8a1a
-
SHA256
014086e26442dc92c9c510ab9c30e2bf4b440aa2ca955bae681883747fa20166
-
SHA512
370ff712e1beb55d715ac24e5bf41e7113901717274e6ac3f467d95000e4a4673b1080fff6b130c210fffff197eec262ddd9a90672c4273722e506b0d2f5aaa2
-
SSDEEP
6144:X5k2lnHHnHrLrLLrLrDKvTu9gSQn3oPT7OI7bitaJFDBvkwbXYwbTEsQrNjp9Ns:X5k9vTcQ3qTCiiqdBvpbXYw8Zjp
Malware Config
Signatures
Files
-
014086e26442dc92c9c510ab9c30e2bf4b440aa2ca955bae681883747fa20166.exe windows x86
5f09f756581f240544ccf8e7e84060b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
LoadLibraryA
DeleteFileA
FatalExit
InitializeCriticalSection
CreateFileMappingW
CreateSemaphoreW
SetVolumeLabelW
CreateMailslotA
SetEnvironmentVariableA
SetCurrentDirectoryA
DeleteFileA
VirtualAlloc
GetProcessHeap
GetStringTypeW
GetModuleHandleW
CreatePipe
WriteConsoleW
GetACP
GetConsoleAliasA
GetStringTypeA
DeviceIoControl
GetShortPathNameW
mshtml
DllEnumClassObjects
ShowModelessHTMLDialog
ShowModalDialog
ShowHTMLDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE