Static task
static1
Behavioral task
behavioral1
Sample
34f32d552d8ad1a85b244740b6bc9fc5dbf6712610f4412ce8d99f3d8c11bae7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34f32d552d8ad1a85b244740b6bc9fc5dbf6712610f4412ce8d99f3d8c11bae7.exe
Resource
win10v2004-20220901-en
General
-
Target
34f32d552d8ad1a85b244740b6bc9fc5dbf6712610f4412ce8d99f3d8c11bae7
-
Size
304KB
-
MD5
9e5e9f7ec38cc111bdc8ff974d50bd6e
-
SHA1
315dd8cf012450661e2e7928b8239539fba9c2f5
-
SHA256
34f32d552d8ad1a85b244740b6bc9fc5dbf6712610f4412ce8d99f3d8c11bae7
-
SHA512
50fe59f59a4db1392eccd50563a214597618b8a904890592e93a78d71e321e556c0fa1addc9a7307870b3a48e84febe308fc8eb3fbeec57bfadfd75af387220d
-
SSDEEP
6144:MuRMOsuyhkTAGFE53aVeVIBHVP1YJuFKlfeasdCOHg5V:FEhKA3aV17tYJuFKlGx2v
Malware Config
Signatures
Files
-
34f32d552d8ad1a85b244740b6bc9fc5dbf6712610f4412ce8d99f3d8c11bae7.exe windows x86
13b8514410a0e45e4822b2ecf22f24d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FindAtomW
VirtualAlloc
GetModuleHandleA
GetVersion
IsBadReadPtr
GetCommandLineA
DeleteAtom
ResumeThread
HeapSize
GetFileSize
SetEndOfFile
SetFileAttributesA
CreateFileA
GetExitCodeThread
WaitForSingleObject
EnterCriticalSection
GetStdHandle
ReleaseMutex
FindVolumeClose
DeleteFileA
ExitProcess
FindVolumeClose
GetEnvironmentVariableA
GetCurrentDirectoryA
shell32
DragAcceptFiles
DragQueryFileA
SHGetDiskFreeSpaceA
ExtractIconA
ShellMessageBoxA
SHGetMalloc
StrChrA
SHGetSettings
DllUnregisterServer
DragFinish
ShellAboutA
DuplicateIcon
SHFree
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ