Static task
static1
Behavioral task
behavioral1
Sample
612c97e4d9d929a094826d134e15e6cf3a00668cce434a9a70525f7ab09f240d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
612c97e4d9d929a094826d134e15e6cf3a00668cce434a9a70525f7ab09f240d.exe
Resource
win10v2004-20221111-en
General
-
Target
612c97e4d9d929a094826d134e15e6cf3a00668cce434a9a70525f7ab09f240d
-
Size
58KB
-
MD5
55ad67cae98bd2c03245b3ebe548036e
-
SHA1
87a191dd2a972cd95f9e8e01d9e9228c5a6087f1
-
SHA256
612c97e4d9d929a094826d134e15e6cf3a00668cce434a9a70525f7ab09f240d
-
SHA512
c0b6e0835992462a9ec45efa88327ad8e4fe22923c4aaf5b9c11fc108e7a77b170eef9315ddf1a37570e905b61ba56033a248317c7a04c293a2f18a7ed9fe36d
-
SSDEEP
1536:MndEVw7aXA/S8nACBuoZB5FfqGSnw8xiMFvKymlfJr:MndEiUA/S8CoZPovxip/lfJ
Malware Config
Signatures
Files
-
612c97e4d9d929a094826d134e15e6cf3a00668cce434a9a70525f7ab09f240d.exe windows x86
0d18dbe3cc6cd651badbba552a41f11b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetDriveTypeW
SuspendThread
CreateNamedPipeA
GetLogicalDriveStringsA
Sleep
HeapCreate
GetVolumePathNameA
GetModuleHandleA
DeleteFileA
IsValidLocale
lstrcmpiA
lstrcmpiA
CreateMailslotA
lstrcmpiA
lstrcmpiA
FileTimeToLocalFileTime
GetStdHandle
WaitForSingleObject
GetModuleFileNameA
SetLastError
lstrlenA
GetProcessHeap
riched20
IID_IRichEditOle
RichEditANSIWndProc
IID_ITextHost
CreateTextServices
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.srt Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ