Static task
static1
Behavioral task
behavioral1
Sample
R3209011873.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
R3209011873.exe
Resource
win10v2004-20220414-en
General
-
Target
6c7311e2b17f44d10a2e029e4dce1db59d0b19131c744bb94083baa27badb137
-
Size
193KB
-
MD5
3f0aa896bd3f89486b42ac379b5e5c8e
-
SHA1
a3b4b3e308a3194f99d7336ec09448433fed6d65
-
SHA256
6c7311e2b17f44d10a2e029e4dce1db59d0b19131c744bb94083baa27badb137
-
SHA512
73217cd491a355d3919595a55683743a6705ee3bf293fcacb909533c671babedca7ba43add73e35e3776093c0656d08f746b591deea3c9c54f8c184d3dd33b73
-
SSDEEP
6144:gx8bjZPxW8+MY94/mSyGvg/zDz/e28Yk+fiy:5bVpWaU0mSvCSHa/
Malware Config
Signatures
Files
-
6c7311e2b17f44d10a2e029e4dce1db59d0b19131c744bb94083baa27badb137.zip
-
R3209011873.exe.exe windows x86
c69172c9b95499b4582306a4d297f468
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
WriteFileGather
CreateFileMappingW
SetStdHandle
MultiByteToWideChar
LoadLibraryA
VirtualProtect
msi
ord97
ord36
ord17
mscms
DisassociateColorProfileFromDeviceA
CreateColorTransformA
EnumColorProfilesA
OpenColorProfileW
GetColorDirectoryW
imm32
ImmEscapeW
ImmSetStatusWindowPos
ImmRequestMessageW
shlwapi
StrNCatW
SHDeleteEmptyKeyW
UrlApplySchemeA
SHRegCreateUSKeyW
user32
EnumThreadWindows
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 427KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ