Static task
static1
Behavioral task
behavioral1
Sample
3cca60b2a105af30efa9c6a53c88c0e457193e545aeac2711c588dc21a95148a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3cca60b2a105af30efa9c6a53c88c0e457193e545aeac2711c588dc21a95148a.exe
Resource
win10v2004-20220901-en
General
-
Target
3cca60b2a105af30efa9c6a53c88c0e457193e545aeac2711c588dc21a95148a
-
Size
309KB
-
MD5
08f234633b8547c92f1f3f5bc9c381f4
-
SHA1
9c10ebb7d3c81fc29e59a28ce1217ec7852cbf16
-
SHA256
3cca60b2a105af30efa9c6a53c88c0e457193e545aeac2711c588dc21a95148a
-
SHA512
d326f44318f4e439ac4c30c09b9c1bac80c67b30cc0923d4aff1abba605a7a08972d243a04523bacd1f0fa1bb873d925376ca2424dcb1f88f1b9f5e163f03f8c
-
SSDEEP
6144:z9w8JnwPd8uBh5TIFIMG5T7SWLsld7SbfpghDBYg3gwwn4ovbsLu7/EmDaK3:z5FwP/LtIFIM+SWIPLBYqovbsLu77W
Malware Config
Signatures
Files
-
3cca60b2a105af30efa9c6a53c88c0e457193e545aeac2711c588dc21a95148a.exe windows x86
bb75d4aee81f432eb66fc782755d8323
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameA
GetCurrentThreadId
GetFileAttributesA
VirtualProtect
DeleteFileW
InterlockedExchange
FindAtomA
GetConsoleMode
GetDriveTypeW
GetProcessHeap
GetModuleFileNameA
GlobalFlags
GetModuleHandleA
CreateFileW
PulseEvent
SetFilePointer
DeleteFileW
OpenMutexA
CreateDirectoryA
GetFileTime
LocalFree
LeaveCriticalSection
HeapDestroy
OpenEventA
CreateFileW
user32
GetWindowLongA
GetWindowDC
GetSysColor
LoadCursorA
DispatchMessageA
GetKeyState
wsprintfA
GetWindowLongA
IsWindowEnabled
PeekMessageA
GetWindowTextA
IsZoomed
MessageBoxA
dfsshlex
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE