Static task
static1
Behavioral task
behavioral1
Sample
3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe
Resource
win10v2004-20220901-en
General
-
Target
3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0
-
Size
112KB
-
MD5
511605e9ca0bb1a3e952ad06950a1cf0
-
SHA1
9d8f550f95e0221ac3a74e49aa117a0b7c903f24
-
SHA256
3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0
-
SHA512
46fdbab88776e8070983d2e53156235ccc30f879ad6a62b8b30735fdf2e7e7b1d5b57caae14a36c97aa9f82114113929f1512981a447eab3a36532876f31e6cf
-
SSDEEP
1536:+fPrJbf6MwESj1cLZqDghxkdxSVmquXFTCeP7rpT/TNmYcRN0vkSjRAg:rhESZcLZq0hpuXFTCxYHhRA
Malware Config
Signatures
Files
-
3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe windows x86
9f776cd0694509235beee060d3d6e94d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleW
GetModuleHandleA
lstrcmpA
GetDriveTypeA
GetStartupInfoA
QueryPerformanceCounter
lstrcmpiA
GetCurrentThreadId
GetUserDefaultLangID
GetCommandLineA
GetOEMCP
CopyFileA
GetCurrentThread
GetCurrentProcessId
DeleteFileA
GlobalFindAtomA
lstrcmpiW
lstrlenW
GetWindowsDirectoryA
lstrlenA
DeleteFileW
MulDiv
GlobalFindAtomW
RemoveDirectoryW
GetTickCount
GetACP
GetCommandLineW
RemoveDirectoryA
GetProcessHeap
SetCurrentDirectoryA
GetConsoleOutputCP
GetVersion
IsDebuggerPresent
GetThreadLocale
VirtualAlloc
VirtualFree
gdi32
DeleteDC
GetObjectA
SetStretchBltMode
SetMapMode
SetTextColor
LineTo
SelectPalette
GetDeviceCaps
GetStockObject
GetClipBox
CreateSolidBrush
CreatePen
SelectObject
RectVisible
CreateFontIndirectA
RestoreDC
GetTextMetricsA
GetPixel
CreatePalette
SetPixel
CreateCompatibleDC
PatBlt
SaveDC
SetTextAlign
DeleteObject
user32
GetParent
GetSystemMetrics
GetDesktopWindow
TranslateMessage
CharNextA
glu32
gluQuadricCallback
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ