Static task
static1
Behavioral task
behavioral1
Sample
e3f33e98182424fb5e01661a30885309892916475e249d8a55366a1c59839680.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3f33e98182424fb5e01661a30885309892916475e249d8a55366a1c59839680.exe
Resource
win10v2004-20220812-en
General
-
Target
e3f33e98182424fb5e01661a30885309892916475e249d8a55366a1c59839680
-
Size
116KB
-
MD5
63322ec5ae43348021d0ac3eba2472f0
-
SHA1
b7d7f5f69dd0256d30bb07d0a6a515bf2fad1595
-
SHA256
e3f33e98182424fb5e01661a30885309892916475e249d8a55366a1c59839680
-
SHA512
ef38064ee6b5e95db02a9767139bffa86458fca7f6152d589e49e67737e9bb67f88782784c9aaee238b827a66ce6af8c07036573f859d16977db4ea05c69d3c2
-
SSDEEP
3072:zewD9xZT2bagyitK7t//XZMSDADeak7dJHB/AC:ywrZT2br1tg/GSsQLH5AC
Malware Config
Signatures
Files
-
e3f33e98182424fb5e01661a30885309892916475e249d8a55366a1c59839680.exe windows x86
80c661a6be8463d2a57960eda032aa8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
lstrcmpiW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcmpW
WritePrivateProfileStringW
GetCommandLineW
GetModuleFileNameW
WaitForSingleObject
FlushFileBuffers
CloseHandle
CreateFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
GetLastError
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
shell32
ShellExecuteExW
shlwapi
PathFileExistsW
StrRChrW
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ