Static task
static1
Behavioral task
behavioral1
Sample
3a41e54fc428696f9ca7b90503875b6f39d61ad108ca8132b8d4eb995f015b47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a41e54fc428696f9ca7b90503875b6f39d61ad108ca8132b8d4eb995f015b47.exe
Resource
win10v2004-20220812-en
General
-
Target
3a41e54fc428696f9ca7b90503875b6f39d61ad108ca8132b8d4eb995f015b47
-
Size
840KB
-
MD5
402052ea06fde92836ec7512a965b13b
-
SHA1
18f5b9df312882254f52e16419fefc00467d4006
-
SHA256
3a41e54fc428696f9ca7b90503875b6f39d61ad108ca8132b8d4eb995f015b47
-
SHA512
d41feb6b0d972fc96483bd2ed7e33a4e9b79c4acd492db313cd94d0bb2f68aa3d47696d67743dc3d27191dc890b1640a0be9bec00646c5237252396e3818e7b1
-
SSDEEP
24576:/WxhCicVPrYnQi6hMLZUygWB7IHu1eT6jw2HkrP:exhlc1cndRLZUygWWO1m6U2ED
Malware Config
Signatures
Files
-
3a41e54fc428696f9ca7b90503875b6f39d61ad108ca8132b8d4eb995f015b47.exe windows x86
0b7a517b68742ce72b5cb55fb17fb57c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
GetLastError
GetCurrentThread
GetVersion
GetTickCount
GetCurrentProcessId
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
HeapCreate
GetModuleFileNameW
CreateFileA
Sleep
TlsGetValue
VirtualFree
VirtualQuery
LoadResource
InitializeCriticalSection
LoadLibraryW
LocalFree
GetOEMCP
GetSystemDirectoryA
FindNextFileA
CompareStringA
InterlockedIncrement
WriteFile
SetUnhandledExceptionFilter
MapViewOfFile
GetCPInfo
RaiseException
CreateMutexA
InterlockedCompareExchange
GetProcAddress
IsDebuggerPresent
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
WideCharToMultiByte
GetConsoleOutputCP
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
GetModuleFileNameA
GetFileSize
GetFileAttributesW
GetVersionExA
TlsAlloc
HeapDestroy
QueryPerformanceCounter
SetEvent
GetFileAttributesA
FileTimeToSystemTime
SetHandleCount
LCMapStringW
HeapFree
user32
EnableWindow
GetSystemMetrics
LoadStringA
EndDialog
SetWindowPos
GetParent
DestroyWindow
Sections
.text Size: 803KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ