Static task
static1
Behavioral task
behavioral1
Sample
1933694d812805eae92d25e2bf1ac59044c2c68cf43a8cd81154940105ee5573.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1933694d812805eae92d25e2bf1ac59044c2c68cf43a8cd81154940105ee5573.exe
Resource
win10v2004-20221111-en
General
-
Target
1933694d812805eae92d25e2bf1ac59044c2c68cf43a8cd81154940105ee5573
-
Size
303KB
-
MD5
f730aac60b83f113f32a4eaba5a5b445
-
SHA1
5bb5e07c72f96d49769cc40db34c8e09c43e4255
-
SHA256
1933694d812805eae92d25e2bf1ac59044c2c68cf43a8cd81154940105ee5573
-
SHA512
db1c088117129207298b752fb76879819c7080b00688af5a12a2d6fb56287166fc4ceed4b5d3432fe16c4471d33f2d9cde874cf66d44e209a95a8fe156b6ec73
-
SSDEEP
6144:VeNWdcbBWo4rlE4xN7+4UV9+ChroVlN+Tpjmp0kBr/BY6uznas5LO:YNWdcbB54rl1nqdvJilNIypTr/BY64L5
Malware Config
Signatures
Files
-
1933694d812805eae92d25e2bf1ac59044c2c68cf43a8cd81154940105ee5573.exe windows x86
d5d9133f8f049c9a6ab0d7cf25225a79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
lstrcpyA
Sleep
lstrcpyA
GetVolumePathNameW
HeapCreate
GetLogicalDriveStringsW
GetStartupInfoA
DeleteFileA
SetLastError
GetCommState
GetModuleHandleA
FileTimeToLocalFileTime
lstrlenW
GetConsoleAliasW
lstrcpyA
GetProcessHeap
GetModuleFileNameA
lstrcpyA
CreateNamedPipeW
lstrcpyA
GetStdHandle
IsValidLocale
sqlunirl
_AppendMenu_@16
_AddAtom_@4
AbortSystemShutdown_
wsprintf_
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ORPC Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ