Static task
static1
Behavioral task
behavioral1
Sample
3afef72f1a87aca7d49f0a15aedbbf6f45dd3288fc3a718b424ae704694cbfac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3afef72f1a87aca7d49f0a15aedbbf6f45dd3288fc3a718b424ae704694cbfac.exe
Resource
win10v2004-20220812-en
General
-
Target
3afef72f1a87aca7d49f0a15aedbbf6f45dd3288fc3a718b424ae704694cbfac.exe
-
Size
5.9MB
-
MD5
c83667821f83720e242ea81fee9347f3
-
SHA1
ce714a0b4c80743232755a062de6c73575e776f3
-
SHA256
3afef72f1a87aca7d49f0a15aedbbf6f45dd3288fc3a718b424ae704694cbfac
-
SHA512
dbcfdbcee4e98d90bd2e2cc0a9d1c7758bd56b684c8f0e73430a8c84a261e75a192e653e3898aa1d1daebd9092e7cbfaf789e097fb79437c28b313d3f6391f37
-
SSDEEP
98304:Edbsh81XECa+LczTaEPhvsDNjVz4p2dTIhIf5gRsbyPNwh7No12dh3wP6XdjLKfT:EdghQLczTamOWpiISxgWOPuS2Hy6tvKf
Malware Config
Signatures
Files
-
3afef72f1a87aca7d49f0a15aedbbf6f45dd3288fc3a718b424ae704694cbfac.exe.exe windows x86
58435290dcc75b122641951f08ff6c21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
wtsapi32
WTSSendMessageW
user32
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Sections
ॐ ◘ Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE