Static task
static1
Behavioral task
behavioral1
Sample
c86e5de30fadd98f772d6ed179b81e8b064439549c3bb2c71cc38d65bfc5eada.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c86e5de30fadd98f772d6ed179b81e8b064439549c3bb2c71cc38d65bfc5eada.exe
Resource
win10v2004-20221111-en
General
-
Target
c86e5de30fadd98f772d6ed179b81e8b064439549c3bb2c71cc38d65bfc5eada
-
Size
32KB
-
MD5
4d8f4d3bfd13c56bb4e08fbdf3f3c145
-
SHA1
138cdb5e72c85d69b6d3216e43ad9c1c60ba39b7
-
SHA256
c86e5de30fadd98f772d6ed179b81e8b064439549c3bb2c71cc38d65bfc5eada
-
SHA512
1d38740e6b60839bd92cbdac4f80cef410af47f39c45473a568dce978dc5c3bc6d52827f0859ec0e2b8f23490fba52045909677a56bb1bc02918dc24b3c623c6
-
SSDEEP
768:Z/yixVaa//SrP265g0/We4Jktngru8yU:Z/yixVaair26q0iGtgt
Malware Config
Signatures
Files
-
c86e5de30fadd98f772d6ed179b81e8b064439549c3bb2c71cc38d65bfc5eada.exe windows x86
b6067cb336f240b3c662f93d1debfe82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
InitAtomTable
SetConsoleCursorMode
FreeConsole
OpenConsoleW
GetStringTypeExW
ProcessIdToSessionId
FindNextChangeNotification
WriteConsoleInputW
user32
DlgDirListW
DdeConnectList
MonitorFromRect
Sections
.code Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ