Static task
static1
Behavioral task
behavioral1
Sample
b2a33349a7feefd4cd740f46db06cd7109c524782d3d3a22d4bd59a7f71ac069.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b2a33349a7feefd4cd740f46db06cd7109c524782d3d3a22d4bd59a7f71ac069.exe
Resource
win10v2004-20220812-en
General
-
Target
b2a33349a7feefd4cd740f46db06cd7109c524782d3d3a22d4bd59a7f71ac069
-
Size
58KB
-
MD5
245886d467a5bba862b8b7c0bd237af0
-
SHA1
8b35874abf6a7195029215bcbd9dd566bc9c4adc
-
SHA256
b2a33349a7feefd4cd740f46db06cd7109c524782d3d3a22d4bd59a7f71ac069
-
SHA512
18da5723cbf0365504efba3a198886f1bbdae3b8263f4712b3b84da09e0ffad467ea2d4ad186c28e1e89662f19b29ef358beae0b51144f58f8786a6d61a957c9
-
SSDEEP
1536:ZI47fk7KhPk/kvHOJIBU+DuGYlwhYXPBjZD:Z3k7erWJIHePB
Malware Config
Signatures
Files
-
b2a33349a7feefd4cd740f46db06cd7109c524782d3d3a22d4bd59a7f71ac069.exe windows x86
0c21a5b71c462bf8be245c49f5cd1bd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetDriveTypeW
IsValidLocale
lstrcmpiA
SetLastError
Sleep
OpenMutexA
CreateMailslotA
CreateNamedPipeW
lstrcmpiA
GetStdHandle
DeleteFileA
lstrcmpiA
HeapCreate
GetVolumePathNameW
GetProcessHeap
lstrcmpiA
GetLogicalDriveStringsW
lstrcmpiA
FileTimeToLocalFileTime
lstrlenA
WaitForMultipleObjects
GetModuleFileNameA
scecli
InitializeChangeNotify
SceOpenPolicy
SceSysPrep
DeltaNotify
Sections
.text Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ