Static task
static1
Behavioral task
behavioral1
Sample
c573b85b555445346573802222b5ba5f5008377dd5619f49a20ce81667600096.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c573b85b555445346573802222b5ba5f5008377dd5619f49a20ce81667600096.exe
Resource
win10v2004-20221111-en
General
-
Target
c573b85b555445346573802222b5ba5f5008377dd5619f49a20ce81667600096
-
Size
393KB
-
MD5
3d8e2fe3508baad32eb3d699bb0e28d0
-
SHA1
8a9966b44c2ab0fe43796532363569e2f2937432
-
SHA256
c573b85b555445346573802222b5ba5f5008377dd5619f49a20ce81667600096
-
SHA512
f2d91fa694f4ed2b8746a0c2a78388713351afa96904336fbe4a59aa32a778dac9aeaaeaa0b7aa32fb9ce0e7a94c78af88253b3beb1c34213b6c83f7e8e249b2
-
SSDEEP
6144:RpvsQiKP17gT56a6qd4HK1MRwPfSa7sz6XE13BOyfozn+9Rlzt4ZFXJnCIWO+f6h:/EQimu97eTetexO40+TlSFXJCI7+
Malware Config
Signatures
Files
-
c573b85b555445346573802222b5ba5f5008377dd5619f49a20ce81667600096.exe windows x86
14be37bddee025d41c35b1bc129a1819
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
WriteConsoleW
Heap32Next
GetExitCodeProcess
GetACP
GetConsoleAliasW
DeleteFileA
LoadLibraryA
CreateMailslotW
GetShortPathNameW
HeapCreate
GetStringTypeW
GetProcessHeap
HeapFree
DeleteFileA
GetConsoleTitleA
SetFilePointer
SetEnvironmentVariableA
CreateFileMappingW
DeleteFileA
SetCurrentDirectoryA
GetModuleHandleW
GetVersion
mstscax
DllRegisterServer
DllGetTscCtlVer
DllCanUnloadNow
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 386KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ