Static task
static1
Behavioral task
behavioral1
Sample
a64853cb5ddac10b0de311b548a66c18dece3f1ab560062fe3a2c40954e0fb74.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a64853cb5ddac10b0de311b548a66c18dece3f1ab560062fe3a2c40954e0fb74.exe
Resource
win10v2004-20220812-en
General
-
Target
a64853cb5ddac10b0de311b548a66c18dece3f1ab560062fe3a2c40954e0fb74
-
Size
305KB
-
MD5
675af34a1666da36306d3716085f8b03
-
SHA1
ab3ed3bd1b06d794df34765cc4156262c7770b00
-
SHA256
a64853cb5ddac10b0de311b548a66c18dece3f1ab560062fe3a2c40954e0fb74
-
SHA512
4c85f0bb07723a46c08d1007c8223fcaded92ef4ad3e913486470982f2f87bd02f69cf464371100ca1d998a15c2397ad2812d3f9c270ae2e924a50462836f824
-
SSDEEP
6144:ZXF82lnHHnHrLrLLrLrDXSlELahTvxV5O7DrzRZKQtKkjSaxLU6rmEjWhoMRm:ZXF8tlEmFx/O7DP6QgkGctKEjw
Malware Config
Signatures
Files
-
a64853cb5ddac10b0de311b548a66c18dece3f1ab560062fe3a2c40954e0fb74.exe windows x86
2607590dd20dc126331f3bb4b0ffd99a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetACP
GetStringTypeW
GetConsoleAliasA
InitializeCriticalSection
SetCurrentDirectoryA
DeleteFileA
SetVolumeLabelW
GetProcessHeap
SetEnvironmentVariableA
VirtualAlloc
CreateFileMappingW
DeleteFileA
GetStringTypeA
GetModuleHandleW
CreateMailslotA
DeviceIoControl
FatalExit
DeleteFileA
WriteConsoleW
CreateSemaphoreW
GetShortPathNameW
CreatePipe
mshtml
ShowModalDialog
DllEnumClassObjects
ShowHTMLDialog
ShowModelessHTMLDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE