Static task
static1
Behavioral task
behavioral1
Sample
3bc357e5a7eea61cf85054d6444d845298aee9025090cd681e4fa9308813211f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3bc357e5a7eea61cf85054d6444d845298aee9025090cd681e4fa9308813211f.exe
Resource
win10v2004-20220812-en
General
-
Target
3bc357e5a7eea61cf85054d6444d845298aee9025090cd681e4fa9308813211f
-
Size
92KB
-
MD5
03566f2493b3c827da0861ae0ee14f80
-
SHA1
5b7ee17b445ef80e9e8f436b31d70d308f31619f
-
SHA256
3bc357e5a7eea61cf85054d6444d845298aee9025090cd681e4fa9308813211f
-
SHA512
de4a80205bfde192816628f14c17e8b9f09d9b447b9f4c038e30048c4de6e9f6b73a877f900ef63c27bcc29483ab8519ff7fb8a5f998cf90533921a871c11976
-
SSDEEP
1536:HsNX1mXsi9XY3VcKvQtomiSY+A37feaCMJDmYsLIb4PvYqHB/AdG4:HS88iFYNQtomiSDADeak7dJHB/AdG4
Malware Config
Signatures
Files
-
3bc357e5a7eea61cf85054d6444d845298aee9025090cd681e4fa9308813211f.exe windows x86
a417d6d8d7f9e8ce4168f3a2c2b6f939
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
FindNextFileA
FindFirstFileA
GetLastError
CloseHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
CreateFileA
DeleteFileA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
ReadFile
SetFilePointer
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
FindClose
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
GetTimeZoneInformation
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE