Static task
static1
Behavioral task
behavioral1
Sample
3a1e1050179019e7fa62374a18799f1ef0c6596d0a40d3a40f5f3271787722c3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a1e1050179019e7fa62374a18799f1ef0c6596d0a40d3a40f5f3271787722c3.exe
Resource
win10v2004-20220812-en
General
-
Target
3a1e1050179019e7fa62374a18799f1ef0c6596d0a40d3a40f5f3271787722c3
-
Size
83KB
-
MD5
7e85e19e55d9b898ab935cfd6eb38983
-
SHA1
5433625920ae2b7cc7cc16ed744209265433cce5
-
SHA256
3a1e1050179019e7fa62374a18799f1ef0c6596d0a40d3a40f5f3271787722c3
-
SHA512
3ca2e2bf1d9e997ab96d9662183efdef1fd6d53968ed71cd6f974fb86c2361c9823175c65e5bc1d50e2bbbcf91954f41bfd3013af77afab1bf359f90edd0a3ec
-
SSDEEP
1536:NSOIVXGLEdTjaceF4n74gUIFxLGqRGUGMPfFWB2ipjVrs2ryrd1vUQuqkO9hDFp:NSVgEpMF47JPFEqsUjXFWB5Hs2qRp
Malware Config
Signatures
Files
-
3a1e1050179019e7fa62374a18799f1ef0c6596d0a40d3a40f5f3271787722c3.exe windows x86
854f1543815c6c4ca86461016886e16e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
Heap32Next
EncodeSystemPointer
FindFirstVolumeMountPointA
PrivCopyFileExW
GetCommandLineA
WritePrivateProfileStringW
WriteFileGather
InterlockedFlushSList
MoveFileW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE