Static task
static1
Behavioral task
behavioral1
Sample
3e846a7316dbc15a38cfd522b14ad3f1a72d79959cbae9fd14621400d77cbc37.exe
Resource
win7-20220414-en
General
-
Target
3e846a7316dbc15a38cfd522b14ad3f1a72d79959cbae9fd14621400d77cbc37
-
Size
190KB
-
MD5
b317f65392f062494cd4d1b386b5ced1
-
SHA1
495d9526a469aeaa253a00f571b1348fe95f745c
-
SHA256
3e846a7316dbc15a38cfd522b14ad3f1a72d79959cbae9fd14621400d77cbc37
-
SHA512
e9452e9cdaf5a4b48af351005f9b3d043e8f26de5eaa47971f5493a20acedf0dbcd9dfe6301e17fcb527827ce3faee8de87d1b15da1e11801b7eeef0c74e0281
-
SSDEEP
3072:g8cDggoZMFtWfbXQs0UJPRPDaG4iXLzllitgiVXHpNAAOiLh:g37gMFt0b8UJ8ZALzl0qiFHpaiLh
Malware Config
Signatures
Files
-
3e846a7316dbc15a38cfd522b14ad3f1a72d79959cbae9fd14621400d77cbc37.exe windows x86
935f2d35b63fe835eeb549d7938ec8b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
TlsGetValue
SetCurrentDirectoryW
GetACP
InterlockedIncrement
VirtualAlloc
LoadLibraryExW
CreateJobObjectA
CreateFileMappingW
GetCurrentDirectoryA
ReadConsoleA
GetVolumeNameForVolumeMountPointA
lstrcmpA
GetModuleHandleA
WriteConsoleW
LoadLibraryA
ResetEvent
TlsAlloc
OpenMutexW
SleepEx
GetCurrentThreadId
RemoveDirectoryA
dbnmpntw
ConnectionClose
ConnectionError
ConnectionVer
ConnectionWrite
user32
GetClassLongW
GetPropW
IsDialogMessageW
CreateDesktopW
PeekMessageA
LoadCursorW
InsertMenuA
IsCharLowerA
PostMessageA
DrawStateW
CreateWindowExW
DispatchMessageA
FindWindowW
LoadMenuW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 157KB - Virtual size: 156KB
IMAGE_SCN_MEM_READ
.sdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.relol Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ