Static task
static1
Behavioral task
behavioral1
Sample
2790f92832b9d5f0eb8702769080bcee02caf18637c25d017a192b06fd036637.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2790f92832b9d5f0eb8702769080bcee02caf18637c25d017a192b06fd036637.exe
Resource
win10v2004-20220812-en
General
-
Target
2790f92832b9d5f0eb8702769080bcee02caf18637c25d017a192b06fd036637
-
Size
56KB
-
MD5
35be151c18a4746c1b1bca64f30d7a06
-
SHA1
03854507a2f9f5461f80cf3c1121e9cb55f26770
-
SHA256
2790f92832b9d5f0eb8702769080bcee02caf18637c25d017a192b06fd036637
-
SHA512
a60e1f59c67e511db76607b90c01f49f6edd958063b41fc50a704ed5a82fa29c4e8ca47dd7a899de30aea7bc74eda62a43cc8ac378d7514939e9861dd0580bdb
-
SSDEEP
1536:IM5lrL0ojxiErFzI0sJR8zIlKut72fYVb6iOgPiZ3lI6FmD:IM5lrLrjnhzKJiz4KqyfYVeiPirx
Malware Config
Signatures
Files
-
2790f92832b9d5f0eb8702769080bcee02caf18637c25d017a192b06fd036637.exe windows x86
a12b89d34e7b6f8a87f4200a0f847a7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiW
lstrcmpiW
GetConsoleAliasW
GetProcessHeap
GetVolumePathNameW
GetLogicalDriveStringsW
GetStartupInfoA
Sleep
lstrcmpiW
GetModuleFileNameA
lstrlenW
GetCommState
lstrcmpiW
GetModuleHandleA
lstrcmpiW
CreateNamedPipeW
SetLastError
CreateMailslotW
DeleteFileA
FileTimeToLocalFileTime
IsValidLocale
GetStdHandle
HeapCreate
sqlunirl
_CallMsgFilter_@8
_AppendMenu_@16
AbortSystemShutdown_
wsprintf_
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ORPC Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ