Static task
static1
Behavioral task
behavioral1
Sample
3c82be68f43f6c0a0dc4712002903240263bc82087c17c867911a232789c99d5.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3c82be68f43f6c0a0dc4712002903240263bc82087c17c867911a232789c99d5.exe
Resource
win10v2004-20220414-en
General
-
Target
3c82be68f43f6c0a0dc4712002903240263bc82087c17c867911a232789c99d5
-
Size
508KB
-
MD5
4e757c9f5b74820e93512cc4fcf9c3c0
-
SHA1
a828e263a7e8a5154bb90614b49a4089695f7609
-
SHA256
3c82be68f43f6c0a0dc4712002903240263bc82087c17c867911a232789c99d5
-
SHA512
19c92c4d77be6ae1e5d028583a59ed344bf24a5db2a2d5d5b9d970f3e1c14a96eaf3c2f7097a6e1086ff177afc22561bad5fe807abee6bea5088e42d9fd978d0
-
SSDEEP
6144:KmVs95r75gaup+6wP/GT6KV4qBCzYg6zOc1svgIl9OEYV9TOVPfuVJQiSCRikzU+:m5HJdG4qzWKyGDs/tvY8Ho
Malware Config
Signatures
Files
-
3c82be68f43f6c0a0dc4712002903240263bc82087c17c867911a232789c99d5.exe windows x86
b6da8e1966559e2000aea72287157e9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualQuery
GetConsoleWindow
GetModuleHandleA
user32
GetShellWindow
GetClassNameA
ShowWindow
msvcrt
sprintf
memcpy
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 60KB - Virtual size: 58KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Xd Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
prmM2Z Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE