Static task
static1
Behavioral task
behavioral1
Sample
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5.exe
Resource
win10v2004-20221111-en
General
-
Target
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5
-
Size
111KB
-
MD5
2d824d8d3a9d6c6039dde6b188177740
-
SHA1
1151abf4c65b7b27e50dc49036877c98c97d646f
-
SHA256
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5
-
SHA512
2202f5bfa365cd24c4797d3bf209301cd6042518462432cde35540a56672660176738dc35b0ab52ff2b4581b727893f7aaa68d09f805851c9e17cb2a92f63f4a
-
SSDEEP
3072:4nyO/bIV2eQTy6sBOwRoiWhi67ZB27q8bTIXmCSfF49:M/bIV2eQ+6soZiMi0Z4q8beS
Malware Config
Signatures
Files
-
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5.exe windows x86
f0271ca258f1aed125e878dbdcd647f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetProcessHeap
GetVolumePathNameW
GetConsoleAliasW
GetStdHandle
CreateMailslotW
lstrcmpiW
GetModuleFileNameA
SetLastError
IsValidLocale
GetCommState
GetStartupInfoA
CreateNamedPipeW
FileTimeToLocalFileTime
lstrcmpiW
GetModuleHandleA
HeapCreate
lstrlenA
lstrcmpiW
Sleep
lstrcmpiW
lstrcmpiW
GetLogicalDriveStringsW
sqlunirl
_CallMsgFilter_@8
AbortSystemShutdown_
_AppendMenu_@16
wsprintf_
Sections
.text Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ORPC Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ