Static task
static1
Behavioral task
behavioral1
Sample
e23fd40489dee0e42f7d4ce4cdaf9091895a408b993d04d1e65b4cdd869c977d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e23fd40489dee0e42f7d4ce4cdaf9091895a408b993d04d1e65b4cdd869c977d.exe
Resource
win10v2004-20221111-en
General
-
Target
e23fd40489dee0e42f7d4ce4cdaf9091895a408b993d04d1e65b4cdd869c977d
-
Size
305KB
-
MD5
4753a485d36b43912fbb9f767ba30ef0
-
SHA1
41612551964f5438f3b2d4e667e7af24c7e5bed9
-
SHA256
e23fd40489dee0e42f7d4ce4cdaf9091895a408b993d04d1e65b4cdd869c977d
-
SHA512
c6d39a409c56d5d3d636ebedb0c2236a7c9b900c01ae95364cf524a0ef11d45c4a63ea613ced0d1ca2fa3d7623c0a4e17a4530f3e051cc86bfe54f664bb72936
-
SSDEEP
6144:DVNn2lnHHnHrLrLLrLrDKt7vFuZvinfxoqnGy2dnQWqJ65G4DYv1lv06:DTnZ946nfxaQWa4Ds1ld
Malware Config
Signatures
Files
-
e23fd40489dee0e42f7d4ce4cdaf9091895a408b993d04d1e65b4cdd869c977d.exe windows x86
7e97b13c940680efc1fc2e10ca6eac12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
GetStringTypeA
VirtualAlloc
DeviceIoControl
GetShortPathNameW
GetStringTypeW
GetConsoleAliasA
DeleteFileA
GetProcessHeap
CreateFileMappingW
SetCurrentDirectoryA
InitializeCriticalSection
LoadLibraryA
CreateMailslotA
CreatePipe
FatalExit
CreateSemaphoreW
DeleteFileA
GetModuleHandleW
SetVolumeLabelW
DeleteFileA
SetEnvironmentVariableA
GetACP
mshtml
DllEnumClassObjects
ShowModalDialog
ShowHTMLDialog
ShowModelessHTMLDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE