Static task
static1
Behavioral task
behavioral1
Sample
f3e506d41fe6a9c70f2caa3da680ae8e3c495d0d77e636142cbb61eb4c150af4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3e506d41fe6a9c70f2caa3da680ae8e3c495d0d77e636142cbb61eb4c150af4.exe
Resource
win10v2004-20220812-en
General
-
Target
f3e506d41fe6a9c70f2caa3da680ae8e3c495d0d77e636142cbb61eb4c150af4
-
Size
301KB
-
MD5
69afcff402b29235f4c1a8b26b627350
-
SHA1
caaa790c5812f45a29b7826c64feba23859aaf8a
-
SHA256
f3e506d41fe6a9c70f2caa3da680ae8e3c495d0d77e636142cbb61eb4c150af4
-
SHA512
e690c17c529ae4c1552b6c2fed4d03e178d8b00cd4d9a8d2bce13ce5d4a6ab556f9514a9d8235fe1356b67f2bbeb4422d5db567f0b896e2b1570ff8a1ecf141e
-
SSDEEP
6144:nR5WLgYJ8Ccpmkkq4qu6FzwY2vH6nmMIR0YnwJQJQDWP30KTmC56zyHA:nRIZ6CcpRkq4qukMj/6vmRhXR+yH
Malware Config
Signatures
Files
-
f3e506d41fe6a9c70f2caa3da680ae8e3c495d0d77e636142cbb61eb4c150af4.exe windows x86
b64004905b778634b0c2b33586832b74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMailslotA
SetLocalTime
ReleaseMutex
CreateDirectoryA
DeleteFileA
GetCommandLineA
GetDriveTypeW
CancelIo
GetModuleHandleA
RemoveDirectoryA
ResetEvent
SetLastError
VirtualProtect
HeapSize
GetLocaleInfoA
WriteFile
GetProcessHeap
GetStdHandle
IsBadWritePtr
GetFileAttributesA
ReadConsoleW
user32
GetCaretPos
PeekMessageA
wsprintfA
DrawIcon
GetWindowTextW
SetCursor
DispatchMessageA
LoadCursorA
SetFocus
GetCapture
DestroyMenu
GetWindowLongW
PostMessageW
filemgmt
DllRegisterServer
DllRegisterServer
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ