Static task
static1
Behavioral task
behavioral1
Sample
3c6617a14ce2c81ee1148f9fc23b6e365c7028bdc72f477cbaec2ae97536a544.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3c6617a14ce2c81ee1148f9fc23b6e365c7028bdc72f477cbaec2ae97536a544.exe
Resource
win10v2004-20220414-en
General
-
Target
3c6617a14ce2c81ee1148f9fc23b6e365c7028bdc72f477cbaec2ae97536a544
-
Size
211KB
-
MD5
391d5c1032d21993431cd763cf1f0275
-
SHA1
42346f6255aba3a01ffeeaaf5701730a7346a351
-
SHA256
3c6617a14ce2c81ee1148f9fc23b6e365c7028bdc72f477cbaec2ae97536a544
-
SHA512
b2c9ac996ef2e6191dc63b31677934cb4b77120196c9b29514df2c28b326bc725e22369896b3f915d4bfca88b066effc73c898e0fe9c8385655efcbb98363030
-
SSDEEP
3072:Eu3wZLJs1QdlEM+ChyPoViiulvGU4BrvFRCH3mc51LlO:vOHEMvhyAVievW3mw
Malware Config
Signatures
Files
-
3c6617a14ce2c81ee1148f9fc23b6e365c7028bdc72f477cbaec2ae97536a544.exe windows x86
b93979f48455d41b32e0e6dceca97308
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memcpy
kernel32
LoadLibraryW
Sleep
GetLastError
GetProcAddress
DeleteCriticalSection
LocalFree
CreateThread
LocalAlloc
ExitProcess
advapi32
RegCreateKeyExA
RegCloseKey
FreeSid
AllocateAndInitializeSid
SetEntriesInAclA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
comctl32
InitCommonControlsEx
ImageList_Add
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ