Static task
static1
Behavioral task
behavioral1
Sample
3866a49619408d747dea58764fef25420ae90b115065462d9d0392212b81fee7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3866a49619408d747dea58764fef25420ae90b115065462d9d0392212b81fee7.exe
Resource
win10v2004-20220812-en
General
-
Target
3866a49619408d747dea58764fef25420ae90b115065462d9d0392212b81fee7
-
Size
838KB
-
MD5
6fa2034575825e44ce4fc79ad102d840
-
SHA1
f74f5320712baef80685376ac6b983c2d3e4b4db
-
SHA256
3866a49619408d747dea58764fef25420ae90b115065462d9d0392212b81fee7
-
SHA512
1fd617ab97471c1a9fa5b94f94f984400fdb6f2ebd692bbae29879dc4ebeb59f7dd37e5c3199869e3f621d2b0e7d299d6783a79a2fb4a5fc82b1431adb8584f8
-
SSDEEP
24576:hj1k8PbQvAgASZ20AN6PITtB2OX2fvQhXjNJ:p1hEQlN60tteQFL
Malware Config
Signatures
Files
-
3866a49619408d747dea58764fef25420ae90b115065462d9d0392212b81fee7.exe windows x86
029fb772069dbad8766772d222e09d59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtPlugPlayControl
ZwOpenDirectoryObject
kernel32
WaitForMultipleObjects
GetThreadLocale
user32
GetForegroundWindow
Sections
.text Size: 831KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE