Static task
static1
Behavioral task
behavioral1
Sample
d3bbf4e234937b4c2b403cd6c4840261790e4939e16eead256d1880a693e9d60.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d3bbf4e234937b4c2b403cd6c4840261790e4939e16eead256d1880a693e9d60.exe
Resource
win10v2004-20220812-en
General
-
Target
d3bbf4e234937b4c2b403cd6c4840261790e4939e16eead256d1880a693e9d60
-
Size
115KB
-
MD5
9fb84a713648eeac10ed1de7757d7db3
-
SHA1
b21774e4da3619a6949e709d98daac5a7ea56436
-
SHA256
d3bbf4e234937b4c2b403cd6c4840261790e4939e16eead256d1880a693e9d60
-
SHA512
47c7769bafb4a85a86c2c9f0f57ef5a3a5eecff267e067d152daac58538f2ab070f0097cbc17362ee4dcab25c2a6cdd348048472167a5f74c6a37abfc90587df
-
SSDEEP
3072:UxK0j71vMTz1eG43rACD8Ce1POCAR1L622:uRdvM/D43rAvCaZAfj
Malware Config
Signatures
Files
-
d3bbf4e234937b4c2b403cd6c4840261790e4939e16eead256d1880a693e9d60.exe windows x86
c30120b4a8f6e775367a8021a129a7c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetStartupInfoA
GetCurrentThreadId
ReadFile
GetProcessHeap
HeapDestroy
FreeLibrary
MultiByteToWideChar
GetCurrentProcessId
WriteFile
EnterCriticalSection
InterlockedDecrement
HeapReAlloc
ExitProcess
lstrcmpiW
Sleep
SetLastError
UnhandledExceptionFilter
LocalFree
lstrlenW
SetLastError
VirtualFree
InitializeCriticalSection
FormatMessageW
QueryPerformanceCounter
GetCurrentProcessId
GetACP
lstrlenW
MultiByteToWideChar
LoadLibraryA
GetModuleFileNameA
WriteFile
Sleep
GetProcessHeap
InitializeCriticalSection
lstrcmpiW
VirtualFree
InterlockedDecrement
GetModuleHandleW
SetFilePointer
HeapFree
LocalAlloc
SetUnhandledExceptionFilter
GetVersionExA
WriteFile
HeapReAlloc
GetACP
CreateThread
SetUnhandledExceptionFilter
Sections
.text Size: 107KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.reloc Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE