Static task
static1
Behavioral task
behavioral1
Sample
d5ee24b3719348120ba6530d083336f5edcd62a01c02c1040fb630d76b5c900d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d5ee24b3719348120ba6530d083336f5edcd62a01c02c1040fb630d76b5c900d.exe
Resource
win10v2004-20221111-en
General
-
Target
d5ee24b3719348120ba6530d083336f5edcd62a01c02c1040fb630d76b5c900d
-
Size
28KB
-
MD5
6bc6e6f188e71917a057ae0bb8f89e91
-
SHA1
e947f87136d280463fa241c673343c4f89109936
-
SHA256
d5ee24b3719348120ba6530d083336f5edcd62a01c02c1040fb630d76b5c900d
-
SHA512
089d5535fd04dbf734babaf5f1e49c065ed3d735e5a26fb6cc1bba2391924feaf798ecc5e2787c94f492301754f6370aa77b673a744916f4bc2d4e48699b3fae
-
SSDEEP
384:ryyWSi2RPjEXbyymnZoQr/qXq1DYOq3NPfTXZFjPO4MlyhoK89yijpN0oX2vur:rtffnZoQjCl3NPLa4wB9ykpNrr
Malware Config
Signatures
Files
-
d5ee24b3719348120ba6530d083336f5edcd62a01c02c1040fb630d76b5c900d.exe windows x86
9244a2afb3dd0163fce3948fb80b9196
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
ReadFile
GetLastError
GetLocalTime
CloseHandle
WriteFile
DisconnectNamedPipe
ConnectNamedPipe
CreateNamedPipeA
CreateProcessA
WaitForSingleObject
SetCommState
GetCommState
CreateFileA
GetCommandLineA
SetThreadPriority
CreateThread
CreateEventA
GetCurrentThread
FreeConsole
SetCommTimeouts
LocalAlloc
LocalFree
CreateFileMappingA
FileTimeToSystemTime
IsBadWritePtr
OpenFileMappingA
MapViewOfFile
Sleep
UnmapViewOfFile
ExitProcess
InitializeCriticalSection
SetLastError
SetNamedPipeHandleState
winmm
timeGetTime
msvcrt
__getmainargs
__setusermatherr
_adjust_fdiv
strstr
_initterm
exit
__p___initenv
_except_handler3
_controlfp
_XcptFilter
_exit
__set_app_type
__p___mb_cur_max
malloc
_isctype
__p__pctype
printf
fgets
sprintf
remove
fopen
fprintf
fclose
__p__commode
__p__fmode
rewind
memmove
_strupr
_itoa
_stricmp
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ