Static task
static1
Behavioral task
behavioral1
Sample
c3a91cce1f51fc39ede93c59f04ae48bd3abaab9769c11abed752efb06733a97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3a91cce1f51fc39ede93c59f04ae48bd3abaab9769c11abed752efb06733a97.exe
Resource
win10v2004-20220812-en
General
-
Target
c3a91cce1f51fc39ede93c59f04ae48bd3abaab9769c11abed752efb06733a97
-
Size
156KB
-
MD5
ee210fc172b13704256b9d34be0fac82
-
SHA1
24af08e694c6f24992d33fd8e19dbb4de6a91866
-
SHA256
c3a91cce1f51fc39ede93c59f04ae48bd3abaab9769c11abed752efb06733a97
-
SHA512
2b5a05e97cdbeb49c8c82fead1049a4cb6af94127607e74de5d4c46d5b6f49039962b4469c8fa8a179eb9a2a731dc499c599c3afcf46eb47792e9dceb1548979
-
SSDEEP
3072:ll8TfpZ5zEaT6mZOVKnAHrOwFRgCdm4aC/feCKTPj7o:HEfpZ5z8cjAHawFRgCc4aof8/o
Malware Config
Signatures
Files
-
c3a91cce1f51fc39ede93c59f04ae48bd3abaab9769c11abed752efb06733a97.exe windows x86
d6f353a76c973fde6bd8bfd952b0d3e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetModuleHandleA
GetFileType
GetVersion
InterlockedIncrement
GetStartupInfoA
CreateProcessA
Module32First
GetLocaleInfoA
GetConsoleMode
GetCurrentProcessId
GetNumberFormatA
lstrcatA
TlsGetValue
LeaveCriticalSection
lstrcmpA
CreateToolhelp32Snapshot
WideCharToMultiByte
IsBadStringPtrW
Sleep
VirtualFree
SetEndOfFile
GetCurrentDirectoryA
CreateThread
SetErrorMode
GetModuleFileNameA
FindClose
FreeLibrary
lstrcmpiA
SetUnhandledExceptionFilter
SizeofResource
QueryPerformanceFrequency
GetProcAddress
GetACP
UnhandledExceptionFilter
LockResource
RtlUnwind
user32
GetClassNameA
SetCursor
DefMDIChildProcA
GetPropA
DestroyWindow
DrawMenuBar
DrawTextA
GetDlgCtrlID
DrawIconEx
TranslateAcceleratorA
GetParent
LoadCursorA
CreateMenu
CheckDlgButton
SetUserObjectSecurity
SetForegroundWindow
EnumWindows
SendMessageTimeoutA
RegisterWindowMessageA
GetWindowPlacement
TranslateMessage
GetUserObjectSecurity
IsZoomed
GetMenu
CheckMenuItem
PtInRect
FillRect
MoveWindow
GetWindowTextA
FrameRect
MessageBoxA
msvcrt
__getmainargs
__p__fmode
memcpy
_initterm
_XcptFilter
_controlfp
_adjust_fdiv
__p__commode
_acmdln
_except_handler3
__setusermatherr
__set_app_type
_exit
exit
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ