Static task
static1
Behavioral task
behavioral1
Sample
886eb5621199e17e9eafc7cbcadb56f151a2415bcf75c07c6c205a4813d3a201.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
886eb5621199e17e9eafc7cbcadb56f151a2415bcf75c07c6c205a4813d3a201.exe
Resource
win10v2004-20221111-en
General
-
Target
886eb5621199e17e9eafc7cbcadb56f151a2415bcf75c07c6c205a4813d3a201
-
Size
120KB
-
MD5
222681af384cdf42fb928a8931366aa0
-
SHA1
62d5575b5014544c84302fe0c71db0474613e9a1
-
SHA256
886eb5621199e17e9eafc7cbcadb56f151a2415bcf75c07c6c205a4813d3a201
-
SHA512
456f49874b26a54626a0ba04829e9d10b5a45a639e8717ad038f5af91fadcba10c418d9da167911c8ced98894a6c914c3de3b5b3e56a91100e15189d604180f0
-
SSDEEP
1536:lSQ+15Sf0Y18DDR4ygaVifFtnuT5h6nj9yhc//3DBGR2KhUxYK6zZ1v9E1CDxTTB:lSQY48Y18DDRifFxsamusXc7gZl9k
Malware Config
Signatures
Files
-
886eb5621199e17e9eafc7cbcadb56f151a2415bcf75c07c6c205a4813d3a201.exe windows x86
16bb29061b2160130a3637b064e91be3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetConsoleAliasW
LoadLibraryA
SetEndOfFile
DeleteFileA
SetEnvironmentVariableA
SetFilePointer
DeleteFileA
WriteConsoleW
CreateFileMappingW
GetACP
GetModuleHandleW
CreateMailslotW
Heap32Next
GetProcessHeap
GetConsoleTitleA
VirtualAlloc
GetStringTypeW
GetVersion
GetShortPathNameW
DeleteFileA
SetCurrentDirectoryA
Heap32First
msoeacct
DllGetClassObject
DllCanUnloadNow
GetDllMajorVersion
ValidEmailAddress
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ