Static task
static1
Behavioral task
behavioral1
Sample
3124e26662a2502229006d6eb7ff4e36782f6deb3f53595001db535ee48ec03f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3124e26662a2502229006d6eb7ff4e36782f6deb3f53595001db535ee48ec03f.exe
Resource
win10v2004-20220812-en
General
-
Target
3124e26662a2502229006d6eb7ff4e36782f6deb3f53595001db535ee48ec03f
-
Size
363KB
-
MD5
1005bc5d8ed17db22a5323807569a5ef
-
SHA1
d33978af86b467ec167c52aa9d675eb38cff1714
-
SHA256
3124e26662a2502229006d6eb7ff4e36782f6deb3f53595001db535ee48ec03f
-
SHA512
083036727b31999a3fceb76432ceece58225c7a8b9f913cc11d35e7800dc879cce48cde7d1b1b7387ec4798ac2d3a661d0f69e1ffa066914a634b34fd2dbc55a
-
SSDEEP
6144:SiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:d+n9O8e0Fcx/bV7Pn5k+XNH
Malware Config
Signatures
Files
-
3124e26662a2502229006d6eb7ff4e36782f6deb3f53595001db535ee48ec03f.exe windows x86
c8e4bbbedc34ca26b9b342e6f6b61bac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
FreeConsole
EnumResourceTypesA
CloseHandle
GetDriveTypeA
GetExitCodeProcess
FindClose
SetLastError
GetCommandLineA
ReleaseMutex
LoadLibraryExW
TlsGetValue
GetTickCount
VirtualProtect
GetModuleHandleA
GetLastError
CreateMutexA
Sleep
GetComputerNameA
GetDiskFreeSpaceExW
shell32
DragFinish
DragAcceptFiles
DuplicateIcon
ExtractIconA
SHGetDiskFreeSpaceA
ShellAboutA
DllUnregisterServer
SHGetMalloc
SHFree
StrChrA
SHGetSettings
DragQueryFileA
ShellMessageBoxA
printui
PnPInterface
bFolderGetPrinter
vPrinterPropPages
vQueueCreate
bPrinterSetup
user32
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ