Static task
static1
Behavioral task
behavioral1
Sample
3679efbfd626f629e05c568bef8d5439652d3ad6b3bdbde7231bd652e617ead2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3679efbfd626f629e05c568bef8d5439652d3ad6b3bdbde7231bd652e617ead2.exe
Resource
win10v2004-20220812-en
General
-
Target
3679efbfd626f629e05c568bef8d5439652d3ad6b3bdbde7231bd652e617ead2
-
Size
440KB
-
MD5
5fa44cea33e339de247ace566637b100
-
SHA1
60a7a14fa5a766f3697d5590e21374c3a992e562
-
SHA256
3679efbfd626f629e05c568bef8d5439652d3ad6b3bdbde7231bd652e617ead2
-
SHA512
2e0ee93c23bcfcd8ea8997b62abdde342d3260068f55759a08145b7285bc8d3873a8fa95b06f8d40f0ac7bf17374a813521fb4321d9f4adf355fecb848eaefc9
-
SSDEEP
12288:BFJgxjLqW5JpNPnKRU5xnqDIkECvH/Xh0+3ycvLpwNhZQzg:BDsLd5dKgdi1wNhZN
Malware Config
Signatures
Files
-
3679efbfd626f629e05c568bef8d5439652d3ad6b3bdbde7231bd652e617ead2.exe windows x86
ba5374800466f3323a3b6510a77220b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetForegroundWindow
TranslateAcceleratorA
shell32
SHGetSpecialFolderLocation
advapi32
GetEffectiveRightsFromAclA
InitiateSystemShutdownExW
kernel32
GetUserDefaultLangID
GetSystemDefaultUILanguage
Sections
.text Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE