Static task
static1
Behavioral task
behavioral1
Sample
52293fab5ae6a58f79e9278acb30b87315ac8d75b9b121d5337224153a961a90.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
52293fab5ae6a58f79e9278acb30b87315ac8d75b9b121d5337224153a961a90.exe
Resource
win10v2004-20220812-en
General
-
Target
52293fab5ae6a58f79e9278acb30b87315ac8d75b9b121d5337224153a961a90
-
Size
307KB
-
MD5
0e545fa54dbcecb008bff6c217c93600
-
SHA1
71ee034fd6110912647efe84a88978db192d73d0
-
SHA256
52293fab5ae6a58f79e9278acb30b87315ac8d75b9b121d5337224153a961a90
-
SHA512
1b4edcba5bb9809436456a5ec2d47615b1cfff370f8fa67c974551c0ae0c3009b8309f6912060e570db019a283ac4cba35214bfaf00fd48a075918745bb7309b
-
SSDEEP
6144:qPw7zfvj8VkWDFygoaC8gPp2tC3k6NlR8bC:qPw7zfvoVkWDFmaC8gPMQ3RIC
Malware Config
Signatures
Files
-
52293fab5ae6a58f79e9278acb30b87315ac8d75b9b121d5337224153a961a90.exe windows x86
ae39c2589482437b8c85b77b6bd66697
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetConsoleAliasA
GetStringTypeW
DeleteFileA
WriteConsoleW
Heap32Next
CreateFileMappingW
Heap32First
DeleteFileA
SetEnvironmentVariableA
GetProcessHeap
SetVolumeLabelW
GetStringTypeW
GetShortPathNameW
LoadLibraryA
GetACP
CreateMailslotA
VirtualAlloc
GetModuleHandleW
SetFilePointer
DeleteFileA
GetConsoleTitleA
SetEndOfFile
msoeacct
ValidEmailAddress
DllCanUnloadNow
GetDllMajorVersion
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE