Static task
static1
Behavioral task
behavioral1
Sample
3f69cb57b8fe3807921c733d966f9bcf403219ee20ac268a7f662d02757d1765.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f69cb57b8fe3807921c733d966f9bcf403219ee20ac268a7f662d02757d1765.exe
Resource
win10v2004-20220812-en
General
-
Target
3f69cb57b8fe3807921c733d966f9bcf403219ee20ac268a7f662d02757d1765
-
Size
271KB
-
MD5
0c2cef7e369f6827c18994aa9e53206f
-
SHA1
1f6ac67ca3904cc28c5b95c839d6508eb67f2f28
-
SHA256
3f69cb57b8fe3807921c733d966f9bcf403219ee20ac268a7f662d02757d1765
-
SHA512
f26d1b4342c9bff289b9b5aeb1a2ec970945c5849d7f5d0ac9e966301f313d23a3e778995ded30643dc16e677d878cfdd8e76e7d106c8d19470a44fbde6a9019
-
SSDEEP
6144:O6SGfiIhaM+gQthwvDQbSvuwsOip53gh2Ql14h9ba1jR:O6J/althwLQbSvuwsnQh2Ql14ja1l
Malware Config
Signatures
Files
-
3f69cb57b8fe3807921c733d966f9bcf403219ee20ac268a7f662d02757d1765.exe windows x86
27ff8c5cc775f44bcca35fcd7671df55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtQuerySystemInformation
_alldiv
RtlSizeHeap
NtFsControlFile
NtQueryVirtualMemory
RtlMultiByteToUnicodeN
RtlInitUnicodeString
RtlCopySid
RtlValidSecurityDescriptor
NtQuerySymbolicLinkObject
msvcrt
malloc
strncmp
__mb_cur_max
time
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
__set_app_type
__initenv
__winitenv
_errno
kernel32
InterlockedDecrement
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoA
GetThreadLocale
InterlockedIncrement
GetProcessHeap
GetCurrentProcess
InterlockedExchange
GetLastError
GetStartupInfoW
Sections
.text Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ