Static task
static1
Behavioral task
behavioral1
Sample
34a682da1e1ea41e149b8971bddf39880380e3ceae6b8ac0790294403ba539e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34a682da1e1ea41e149b8971bddf39880380e3ceae6b8ac0790294403ba539e4.exe
Resource
win10v2004-20220812-en
General
-
Target
34a682da1e1ea41e149b8971bddf39880380e3ceae6b8ac0790294403ba539e4
-
Size
25KB
-
MD5
06040af3aa9baece02b8561a79f70ae7
-
SHA1
8e42a481c47c6c12bb651485cdf8513371e1eba6
-
SHA256
34a682da1e1ea41e149b8971bddf39880380e3ceae6b8ac0790294403ba539e4
-
SHA512
a8e909e9f5492054c0fade6723b28c9b9f81b13ac7b4b8dea16d5b5f703246d8b6041616b187e00bbce718fa3696e10179f4fb0bf02361f0e75cd4096f7e6329
-
SSDEEP
192:dFBW9uoIS73ovP1oyn8PWgJy5uxiYBWYgSjfKW21bHqhs711mLZIJPPqEtWHj:d3S7Y31aPZJy5uxiWWHqsB1kZItyEtW
Malware Config
Signatures
Files
-
34a682da1e1ea41e149b8971bddf39880380e3ceae6b8ac0790294403ba539e4.exe windows x86
eec419fa99aab01043dd9b2ae197b39c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
lstrlenA
LoadLibraryA
GetProcAddress
CloseHandle
lstrcpyA
GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryA
Process32Next
CreateToolhelp32Snapshot
Process32First
FreeLibrary
GetVersionExA
DeleteFileA
Sleep
user32
wsprintfA
advapi32
RegDeleteValueA
RegQueryValueExA
RegEnumValueA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
msvcrt
_mbsnbicmp
_mbsrchr
fwrite
fclose
ftell
fseek
fopen
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE