Static task
static1
Behavioral task
behavioral1
Sample
2e1f8a3b7440b51fc122d733cc3c989c359eeb17d12aaf4990513d628f47e115.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2e1f8a3b7440b51fc122d733cc3c989c359eeb17d12aaf4990513d628f47e115.exe
Resource
win10v2004-20221111-en
General
-
Target
2e1f8a3b7440b51fc122d733cc3c989c359eeb17d12aaf4990513d628f47e115
-
Size
301KB
-
MD5
fc3a5187b5cf5f92e0b40cb31a01f1db
-
SHA1
ac4ffcec9bf2c0a3989a516c78737c6cd37fa548
-
SHA256
2e1f8a3b7440b51fc122d733cc3c989c359eeb17d12aaf4990513d628f47e115
-
SHA512
c68891fd569ba667e90995328ebbb5e437e0c2369545ae31f09b40f356bc2886892a7e112d930e22ae94fb656522afa1ca63295b3c51270f98a343c04d662b30
-
SSDEEP
6144:WKOadcbBWriOZ2z1IJq/6Z/yYaxZ2Fqy6+1V6a:WKldcbBKPtJq2amFqyLb
Malware Config
Signatures
Files
-
2e1f8a3b7440b51fc122d733cc3c989c359eeb17d12aaf4990513d628f47e115.exe windows x86
90b036c7797ab61207978f920520e2c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
CreateMailslotW
CreateNamedPipeW
GetConsoleAliasW
lstrcmpiW
GetStartupInfoA
IsValidLocale
GetCommState
lstrcmpiW
DeleteFileA
HeapCreate
lstrcmpiW
GetModuleHandleA
GetModuleFileNameA
GetVolumePathNameW
GetProcessHeap
lstrcmpiW
GetLogicalDriveStringsW
lstrcmpiW
lstrlenA
Sleep
GetStdHandle
SetLastError
sqlunirl
AbortSystemShutdown_
wsprintf_
_AppendMenu_@16
_CallMsgFilter_@8
Sections
.text Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ