Static task
static1
Behavioral task
behavioral1
Sample
3b65fa542a4b412663d651c8f3785b915c14dd512d3b4bfcf01eed0802c442c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b65fa542a4b412663d651c8f3785b915c14dd512d3b4bfcf01eed0802c442c7.exe
Resource
win10v2004-20220812-en
General
-
Target
3b65fa542a4b412663d651c8f3785b915c14dd512d3b4bfcf01eed0802c442c7
-
Size
284KB
-
MD5
6ed4e942a3c698fffae81fc0a3e39bc0
-
SHA1
d1f5fb7a4d7a39244d5009e4a3daf88665b53b77
-
SHA256
3b65fa542a4b412663d651c8f3785b915c14dd512d3b4bfcf01eed0802c442c7
-
SHA512
d77fbfdf4f80e94db0cb276ce195c244146ba58e07690c894ad2ca5c1f324b3832e6fb06fd97df39dbd44fa7aa72b9b128d3a8374f176863dc6c2080617ede2d
-
SSDEEP
6144:GxSlTeKw5DJA3adRZLGTbx+v2Fu/v7xbC2W032zLbLzUD0XlKy/Ulrs:GWT69JA4vKTbkDxCnbLM01KVs
Malware Config
Signatures
Files
-
3b65fa542a4b412663d651c8f3785b915c14dd512d3b4bfcf01eed0802c442c7.exe windows x86
8d7684a8a25a4f1d34417a281c070bb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmifs
DiskCopy
EnableVolumeCompression
Extend
ComputeFmMediaType
Chkdsk
Format
FormatEx
kernel32
GetSystemTimeAsFileTime
GetOEMCP
LoadLibraryA
HeapAlloc
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcessId
WideCharToMultiByte
GetTickCount
CreateFileA
FindResourceW
GetCurrentProcess
GetLocalTime
SystemTimeToFileTime
CloseHandle
lstrcmpA
lstrlenW
SetLastError
MultiByteToWideChar
lstrcpyW
GetLocaleInfoW
QueryPerformanceCounter
HeapFree
w32topl
ToplSTHeapInit
ToplScheduleExportReadonly
ToplSTHeapExtractMin
ToplScheduleCacheDestroy
ToplScheduleDuration
ToplScheduleCreate
ToplSTHeapDestroy
ToplScheduleCacheCreate
Sections
.text Size: 276KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ