Static task
static1
Behavioral task
behavioral1
Sample
f3b7ede4007c96bff61117620a1262df8d097d614805fc13e7e764ee42f0466d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3b7ede4007c96bff61117620a1262df8d097d614805fc13e7e764ee42f0466d.exe
Resource
win10v2004-20220812-en
General
-
Target
f3b7ede4007c96bff61117620a1262df8d097d614805fc13e7e764ee42f0466d
-
Size
80KB
-
MD5
421d29b5fd5894ffbdb27e26bcf9d290
-
SHA1
e1b9c49f56604f14cadfdf90f4353304177cf294
-
SHA256
f3b7ede4007c96bff61117620a1262df8d097d614805fc13e7e764ee42f0466d
-
SHA512
7179e0ebe3c80054a7e3e8c1b7f108a79dc4afc580eec3fd2497d0a0eca7e004cf51922597e4731d54cbca50a28a2df115812eff8a598b2cf636240a24db67dc
-
SSDEEP
1536:C1rSv2cKdp3XNjuYFxVRfNsOGWfCscoFssdrf:WOvrKnNBFxTfyWKL6j7
Malware Config
Signatures
Files
-
f3b7ede4007c96bff61117620a1262df8d097d614805fc13e7e764ee42f0466d.exe windows x86
bfe318b8d5d8ea5e2de44939290fd9d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
FindClose
CloseHandle
GetModuleHandleA
GetStringTypeA
GetFileAttributesW
GetFileAttributesW
GlobalLock
HeapFree
LocalFlags
GetStdHandle
GetVersionExA
CreateEventA
CreateDirectoryW
SetLastError
GetCurrentThread
GetCurrentProcess
VirtualProtectEx
GetPrivateProfileSectionA
GetPrivateProfileIntA
RemoveDirectoryW
user32
IsDialogMessageA
SetFocus
PeekMessageW
PostMessageW
GetWindowLongW
DispatchMessageA
IsWindow
IsZoomed
GetWindowTextW
IsCharLowerA
SetCursorPos
LoadCursorW
wsprintfW
ntmarta
AccGetExplicitEntries
AccConvertSDToAccess
AccFreeIndexArray
AccConvertAclToAccess
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ