Static task
static1
Behavioral task
behavioral1
Sample
12fa1157b1ba0ec3fce4e503bf0e884a8e2c1be2714e604030b84db0c96f5200.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
12fa1157b1ba0ec3fce4e503bf0e884a8e2c1be2714e604030b84db0c96f5200.exe
Resource
win10v2004-20221111-en
General
-
Target
12fa1157b1ba0ec3fce4e503bf0e884a8e2c1be2714e604030b84db0c96f5200
-
Size
113KB
-
MD5
1628ae15a7140a3385efa6c422089458
-
SHA1
f2a90c19c490d7877118c611499bb23c7731688c
-
SHA256
12fa1157b1ba0ec3fce4e503bf0e884a8e2c1be2714e604030b84db0c96f5200
-
SHA512
132870ab2efa072973ee6ae7503c43c3fae01ba249090c5ac6db124304f41796750361d8e6b7147baffbb383fd837fa528660f8ce15b0dfdb24d674e4ed89339
-
SSDEEP
1536:LUZdGLay+9G8A+jbEmYjXdMfdBXwVYSFkzXOWRHyqgV/AjkF9K/uCk:LUZdGLaz9G8BakBXMYSFSXOWNo/D
Malware Config
Signatures
Files
-
12fa1157b1ba0ec3fce4e503bf0e884a8e2c1be2714e604030b84db0c96f5200.exe windows x86
15d258a9c1315c57a480a35e8ba71cb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsA
GetModuleFileNameA
lstrcmpiA
lstrcmpiA
IsValidCodePage
lstrcmpiA
FileTimeToLocalFileTime
GetStdHandle
SetLastError
lstrcmpiA
lstrcmpiA
Sleep
lstrlenA
GetDriveTypeW
GetVolumePathNameA
GetModuleHandleA
WaitForSingleObject
HeapCreate
DeleteFileA
CreateMailslotA
SuspendThread
CreateNamedPipeA
GetProcessHeap
rastls
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rts Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ