Static task
static1
Behavioral task
behavioral1
Sample
e3c2af48af4fd309a51ec4f2cc36cc3ef262ee919b688d7ef211b7df30efb356.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3c2af48af4fd309a51ec4f2cc36cc3ef262ee919b688d7ef211b7df30efb356.exe
Resource
win10v2004-20220812-en
General
-
Target
e3c2af48af4fd309a51ec4f2cc36cc3ef262ee919b688d7ef211b7df30efb356
-
Size
195KB
-
MD5
472c33881b799aea8c1fd12bdca17840
-
SHA1
a3eb7692620d193ea17f1351dd0658b13a26b6da
-
SHA256
e3c2af48af4fd309a51ec4f2cc36cc3ef262ee919b688d7ef211b7df30efb356
-
SHA512
df83696ddc88974b313b785ce4d79d2c0b943f838a6e2ce48d54dd7f90af84c378c233c1489ae0d27b998f9f36e815a18f59847a8b1880672be58ba82547dc1a
-
SSDEEP
3072:IsQ5fG6gqX7AOSwCOuYQlqghOjENAIlptog3Tl6zrueBkEckanSZMAZHV7ZLXYvp:b6OsbK
Malware Config
Signatures
Files
-
e3c2af48af4fd309a51ec4f2cc36cc3ef262ee919b688d7ef211b7df30efb356.exe windows x86
df57a2a7b4b2e21a0b558c480222b82c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetModuleFileNameA
GetCommandLineA
IsDBCSLeadByte
LocalFree
CloseHandle
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
WriteFile
GetStdHandle
lstrlenA
lstrcatA
lstrcpyA
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
lstrcmpiA
lstrcmpA
SetConsoleTitleA
GetVersionExA
SetEnvironmentVariableA
FindClose
FindFirstFileA
GetFullPathNameA
InterlockedIncrement
LocalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
GetCurrentThreadId
LoadResource
FindResourceExA
GetUserDefaultLangID
GetSystemDefaultLangID
SetLastError
lstrlenW
RtlUnwind
user32
CharNextA
DispatchMessageA
CharLowerA
GetMessageA
CharPrevA
PostThreadMessageA
LoadStringA
CharToOemA
TranslateMessage
wvsprintfA
ole32
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoUninitialize
oleaut32
SysFreeString
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE