Static task
static1
Behavioral task
behavioral1
Sample
e3fcfd129c2d74f127b42cff0d65d9ede6af74502d8496bc600625b18ef81388.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3fcfd129c2d74f127b42cff0d65d9ede6af74502d8496bc600625b18ef81388.exe
Resource
win10v2004-20220812-en
General
-
Target
e3fcfd129c2d74f127b42cff0d65d9ede6af74502d8496bc600625b18ef81388
-
Size
59KB
-
MD5
65ffd86d7495bab215eefebc30a51d7b
-
SHA1
8029a7d97004faba3a4c3b9964974895660e7f91
-
SHA256
e3fcfd129c2d74f127b42cff0d65d9ede6af74502d8496bc600625b18ef81388
-
SHA512
bab59b6b33a038002c27ca57f296d34d30c3f21a4b62416e65d976f549984f56670799dc797bed5fa5b367eefd31b3eb73afcd88525d7f7bee9afe4b4e36abe6
-
SSDEEP
1536:gJLGIey2+rVJAM2jmjPwecHTh7OHZ3pr7:gJL3J2BMJOT4pp
Malware Config
Signatures
Files
-
e3fcfd129c2d74f127b42cff0d65d9ede6af74502d8496bc600625b18ef81388.exe windows x86
431a15afb2c7c97f4fa4446a0a422f64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
WaitForSingleObject
Sleep
DeleteFileA
CreateNamedPipeA
lstrlenA
lstrcmpiA
SuspendThread
FileTimeToLocalFileTime
GetModuleHandleA
CreateMailslotA
HeapCreate
IsValidLocale
GetProcessHeap
GetModuleFileNameA
lstrcmpiA
lstrcmpiA
GetVolumePathNameA
SetLastError
lstrcmpiA
GetDriveTypeW
GetStdHandle
GetLogicalDriveStringsA
riched20
CreateTextServices
RichEditANSIWndProc
IID_ITextHost
IID_IRichEditOle
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sql Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ