Static task
static1
Behavioral task
behavioral1
Sample
d3ba3f232647c6ddf91f762bb0fc82ada0daaaf86876e6d952fa9de7dcae4e51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3ba3f232647c6ddf91f762bb0fc82ada0daaaf86876e6d952fa9de7dcae4e51.exe
Resource
win10v2004-20220901-en
General
-
Target
d3ba3f232647c6ddf91f762bb0fc82ada0daaaf86876e6d952fa9de7dcae4e51
-
Size
156KB
-
MD5
3ddc9330d9a2c4e9b368ffb1366258e6
-
SHA1
a1ecbcbe20c70145fc3b34584002717150cefd99
-
SHA256
d3ba3f232647c6ddf91f762bb0fc82ada0daaaf86876e6d952fa9de7dcae4e51
-
SHA512
34e6c54e3acffe0841f44cbc1c88ed3a5c697d01d42497149ce583f68a7f46e238ddb0d72d938519389f4b24f4597431293a3926cd710e33f653a4f9f2c06599
-
SSDEEP
3072:ZZ7EZbK4AgTcCaefvqgobN5y9ieK7HoNF:rghKsThaefSVAwp7c
Malware Config
Signatures
Files
-
d3ba3f232647c6ddf91f762bb0fc82ada0daaaf86876e6d952fa9de7dcae4e51.exe windows x86
fee4e6311ea3e33b40341bd19073aab2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
FindNextFileA
FindFirstFileA
Sleep
WinExec
GetCurrentProcess
FindClose
GetTempPathA
MultiByteToWideChar
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetModuleFileNameA
CopyFileA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
ReadFile
DeleteFileA
CreateDirectoryA
GetLastError
GetFileAttributesA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
CloseHandle
WriteFile
SetFilePointer
WideCharToMultiByte
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
advapi32
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegRestoreKeyA
RegOpenKeyA
RegSaveKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
imagehlp
MakeSureDirectoryPathExists
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ