Static task
static1
Behavioral task
behavioral1
Sample
3a26abaf7d25ecbdb48fdcf93f77eb706628327867d4bb4d59c61074c252a8ae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a26abaf7d25ecbdb48fdcf93f77eb706628327867d4bb4d59c61074c252a8ae.exe
Resource
win10v2004-20220812-en
General
-
Target
3a26abaf7d25ecbdb48fdcf93f77eb706628327867d4bb4d59c61074c252a8ae
-
Size
312KB
-
MD5
38c9763d017167484343028b9ea14650
-
SHA1
64b732758749d375bfaebdf1d8281deb95507ea7
-
SHA256
3a26abaf7d25ecbdb48fdcf93f77eb706628327867d4bb4d59c61074c252a8ae
-
SHA512
04d2864ad1c9b896ced0a961ff172e7bab6b7e5480ad37ad49e318cc0063ca8686dc44a533f1d376bf7f2006c0e9aaeec8814a6dfc5556d8c8ae0820cbee135f
-
SSDEEP
6144:4rTuETVyp+zFTan/bdV+6A5iP2naGmzvXYu5aRCaMMQG:4Wr+zUDvA5eYYvYiaPMY
Malware Config
Signatures
Files
-
3a26abaf7d25ecbdb48fdcf93f77eb706628327867d4bb4d59c61074c252a8ae.exe windows x86
218a056c4e7a0fa3196e52234a01f579
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
RaiseException
GetLocaleInfoA
IsDebuggerPresent
GetCurrentProcessId
OpenMutexA
HeapCreate
FreeEnvironmentStringsA
GetStdHandle
GetCommandLineA
GetSystemDirectoryA
SetEvent
ReadConsoleA
GetACP
GetCompressedFileSizeA
InterlockedExchange
FlushFileBuffers
GlobalFree
GetCurrentThread
VirtualProtect
LoadLibraryExA
user32
EndPaint
GetWindowTextA
ShowWindow
BeginPaint
SetActiveWindow
GetFocus
ValidateRgn
wsprintfA
DrawTextA
GetCursorPos
FillRect
GetClassNameA
GetWindow
GetDlgItem
SetForegroundWindow
FrameRect
GetParent
IsIconic
ReleaseDC
crypt32
CertCloseStore
CertControlStore
CertDuplicateStore
CertFindAttribute
CertCreateContext
apphelp
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ