Static task
static1
Behavioral task
behavioral1
Sample
339303f2601d162e89999e736e5316e4110a79d84952fbc566d6145c10750640.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
339303f2601d162e89999e736e5316e4110a79d84952fbc566d6145c10750640.exe
Resource
win10v2004-20220812-en
General
-
Target
339303f2601d162e89999e736e5316e4110a79d84952fbc566d6145c10750640
-
Size
301KB
-
MD5
ca7ba4aa4ae3a6d64b047694cf5126d0
-
SHA1
39b564247e0400829b4c805de0fe9e7f25b34b24
-
SHA256
339303f2601d162e89999e736e5316e4110a79d84952fbc566d6145c10750640
-
SHA512
98284724b11c3a87176c4d2c82e06a9f7c791d7ca3e6f7a9a6a4e53120f97a96d74b38d3833fcf7500c0cd090a835c3bce00136683b31cef0e2353ff0b4f29a1
-
SSDEEP
6144:6QTMFsmOUKWs1IJG0uGtVFMhAbmPJ703sZsKtW6Eag2s:6QyjKr1IJLzMhkmh776KtW6Ex
Malware Config
Signatures
Files
-
339303f2601d162e89999e736e5316e4110a79d84952fbc566d6145c10750640.exe windows x86
f8fa5c168d9ddeb72bde00d49b48b945
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FindClose
WriteConsoleA
CreatePipe
CreateMailslotA
GetModuleHandleA
CreateEventA
FindClose
GetCurrentDirectoryW
Sleep
SetEnvironmentVariableA
CopyFileA
CreateSemaphoreA
SetVolumeLabelA
VirtualFree
GetVolumePathNameW
GetModuleHandleW
GetFullPathNameW
GetStringTypeA
HeapCreate
GetFullPathNameW
CreateFileMappingA
FindClose
mshtml
PrintHTML
DllCanUnloadNow
ShowModalDialog
DllGetClassObject
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ