Static task
static1
Behavioral task
behavioral1
Sample
8784986-9541-0131-Nr.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8784986-9541-0131-Nr.exe
Resource
win10v2004-20220414-en
General
-
Target
3dec0ff4f9e0ac0906b749ef56da406ff617aa55d7c5d5f1b3a2adf13b6c6602
-
Size
621KB
-
MD5
fe3b6ba10bb6d6d838e7b0e509062ac2
-
SHA1
0247b326ade57fdf04a840b5b1089e94a3e5584c
-
SHA256
3dec0ff4f9e0ac0906b749ef56da406ff617aa55d7c5d5f1b3a2adf13b6c6602
-
SHA512
1e3d6b9fdfb719b4f0f900e08425689bfb06ad45138ae5892958683623df12eada87c54bbd4da2c369c1da002cb7108aa7362128f2cb0355e9690d0700d3db82
-
SSDEEP
12288:Q0jhw51alVGuAODM6qDy9CSl7zsf7MQduWQTl9U3I0/FgeoDmf5uFL10tm:DVwaDpqD4BVim3DmfOh0tm
Malware Config
Signatures
Files
-
3dec0ff4f9e0ac0906b749ef56da406ff617aa55d7c5d5f1b3a2adf13b6c6602.zip
-
8784986-9541-0131-Nr.com.exe windows x86
6780ce4944e66311213167035ae008dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
untfs
Extend
Recover
kernel32
GetFileType
GetExpandedNameW
FormatMessageA
GetEnvironmentVariableA
GetCurrentProcess
OpenWaitableTimerW
HeapAlloc
GetConsoleTitleA
CreateFileMappingA
GetModuleHandleA
GetShortPathNameA
lstrcmpi
GetProcAddress
SleepEx
Sections
.text Size: 634KB - Virtual size: 633KB
IMAGE_SCN_MEM_EXECUTE
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
.RSRC Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ