Static task
static1
Behavioral task
behavioral1
Sample
b5e8627692c1256f3cef48909420cee1bc32547d236a83efaae6e1a798149bc8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5e8627692c1256f3cef48909420cee1bc32547d236a83efaae6e1a798149bc8.exe
Resource
win10v2004-20220812-en
General
-
Target
b5e8627692c1256f3cef48909420cee1bc32547d236a83efaae6e1a798149bc8
-
Size
305KB
-
MD5
0f41a34aa8300d1c926e78d7d992f890
-
SHA1
0e613eba750ccf3552cb1dca8606b806eb330890
-
SHA256
b5e8627692c1256f3cef48909420cee1bc32547d236a83efaae6e1a798149bc8
-
SHA512
aae4fe0615b73350f6794f34316f63199d342181ecf269d9e21a6efb842424771db6bf63c7d872795ff56b4088ce4001fdedc885ebdf06e508d0b64604bc18a3
-
SSDEEP
6144:0SQM2lnHHnHrLrLLrLrDiDFf8xW8+xgVgF3gfSEmPwlbXIzh1anatrGPl1q6lKpa:VvFf8xd9KSEwlbXYaErO1q8K
Malware Config
Signatures
Files
-
b5e8627692c1256f3cef48909420cee1bc32547d236a83efaae6e1a798149bc8.exe windows x86
a07771e195a0f65b2c98d58303ad8f4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
DeleteFileA
GetShortPathNameW
SetVolumeLabelW
CreateFileMappingW
GetConsoleAliasA
GetProcessHeap
DeleteFileA
VirtualAlloc
GetStringTypeW
GetStringTypeA
SetCurrentDirectoryA
DeleteFileA
FatalExit
DeviceIoControl
CreateSemaphoreW
GetACP
CreateMailslotA
CreatePipe
SetEnvironmentVariableA
InitializeCriticalSection
GetModuleHandleW
WriteConsoleW
mshtml
ShowModelessHTMLDialog
DllEnumClassObjects
ShowModalDialog
ShowHTMLDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE