Static task
static1
Behavioral task
behavioral1
Sample
d6eb4090182ce81c8902843705d9147e772f87a3247f9eb5e1cfccf0f03427b0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d6eb4090182ce81c8902843705d9147e772f87a3247f9eb5e1cfccf0f03427b0.exe
Resource
win10v2004-20220901-en
General
-
Target
d6eb4090182ce81c8902843705d9147e772f87a3247f9eb5e1cfccf0f03427b0
-
Size
500KB
-
MD5
2198db4fd43cadb2158f96002a671060
-
SHA1
eee274319e74dae40c3b11030170d467e3c6c7a8
-
SHA256
d6eb4090182ce81c8902843705d9147e772f87a3247f9eb5e1cfccf0f03427b0
-
SHA512
09cad1039f3c6144293803bc74a9abde323427b3d30451cc30713b115806b617ce61f7af32f6f5695508f14b8de4b9e733a1e7365f305c542194779f8357888e
-
SSDEEP
12288:knWonD6sOvA118sYCkwamja7bcZTrE5FC3elX/XICHMh:gWoD6sOv618ErQAsXvICHY
Malware Config
Signatures
Files
-
d6eb4090182ce81c8902843705d9147e772f87a3247f9eb5e1cfccf0f03427b0.exe windows x86
5716cb8d6d9f68862349c531c3b3c8af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sleep
CreateNamedPipeW
lstrcmpiA
GetProcessHeap
WaitForMultipleObjects
CreateMailslotA
GetModuleFileNameA
lstrcmpiA
GetDriveTypeW
GetModuleHandleA
FileTimeToLocalFileTime
lstrlenA
DeleteFileA
SetLastError
IsValidLocale
lstrcmpiA
HeapCreate
lstrcmpiA
GetVolumePathNameW
lstrcmpiA
GetLogicalDriveStringsW
OpenMutexA
scecli
InitializeChangeNotify
DeltaNotify
SceOpenPolicy
SceSysPrep
Sections
.text Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 4KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 492KB - Virtual size: 492KB
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ