Static task
static1
Behavioral task
behavioral1
Sample
3dbd2739d37a6f246eabc203ca1d884c26fdc224c6527e74106377b56326646b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3dbd2739d37a6f246eabc203ca1d884c26fdc224c6527e74106377b56326646b.exe
Resource
win10v2004-20220812-en
General
-
Target
3dbd2739d37a6f246eabc203ca1d884c26fdc224c6527e74106377b56326646b
-
Size
259KB
-
MD5
6b4591b3a0851a3358a4bf29b92a5dc0
-
SHA1
6d588e2bcb8ff1d5b6fc18962bef3f6aa8362c5f
-
SHA256
3dbd2739d37a6f246eabc203ca1d884c26fdc224c6527e74106377b56326646b
-
SHA512
ca76ad79ab499bb85a7c224f59a9a58e2d5c5b0307431c7f579016d6574a3e0ec2b13eb911fb90d1ce7bb6e58b0d4c983f1d5cf8ff397a188486907a09d99f99
-
SSDEEP
6144:qzQEmjucybqwyD1cSdo//kGAF1p33WZzJN3NVSfQK3:Tj7yb+1cYo//OFr33izb32fQ
Malware Config
Signatures
Files
-
3dbd2739d37a6f246eabc203ca1d884c26fdc224c6527e74106377b56326646b.exe windows x86
730203c8e27b93aea5cabef37410d7d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnregisterClassA
CharLowerBuffA
kernel32
GetCurrentThreadId
LockResource
HeapDestroy
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
SetUnhandledExceptionFilter
CreateDirectoryA
LoadResource
GetACP
FindResourceExA
HeapSize
FindResourceA
UnhandledExceptionFilter
lstrlenW
DeleteCriticalSection
RaiseException
GetSystemTimeAsFileTime
lstrlenA
HeapFree
IsDebuggerPresent
HeapAlloc
EnterCriticalSection
GetThreadLocale
LeaveCriticalSection
SizeofResource
HeapCreate
VirtualAllocEx
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
query
BindIFilterFromStream
LoadTextFilter
DllCanUnloadNow
CollectFILTERPerformanceData
console
CPlApplet
Sections
.qZcd Size: 3KB - Virtual size: 27KB
IMAGE_SCN_MEM_READ
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vcirnQ Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.akxjOT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jJyA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bmldg Size: 1024B - Virtual size: 663B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wRxQVY Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aInCoOF Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oByYO Size: 512B - Virtual size: 245B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xqaJEFE Size: 1024B - Virtual size: 938B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MwIGPj Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WfhQzB Size: 1024B - Virtual size: 934B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE