Static task
static1
Behavioral task
behavioral1
Sample
3e25d8d740148786fab6b00b68963d2233ff58fa83df408c97a4ab1f3c83ba1e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e25d8d740148786fab6b00b68963d2233ff58fa83df408c97a4ab1f3c83ba1e.exe
Resource
win10v2004-20220812-en
General
-
Target
3e25d8d740148786fab6b00b68963d2233ff58fa83df408c97a4ab1f3c83ba1e
-
Size
116KB
-
MD5
34e36e1f5f26970c5c6322f48892b9d0
-
SHA1
f240cd54dbdc096b231fbaeb20a79841a23fd09b
-
SHA256
3e25d8d740148786fab6b00b68963d2233ff58fa83df408c97a4ab1f3c83ba1e
-
SHA512
3a61ab860cc1ff9a8f1031dec4a8fadd86e2ecbd6833e160e4f663f83a3f86a22eb5fd33ee64ae0412d0554ff9f15170147d6c37249fe946979a8316b1b3cd7b
-
SSDEEP
3072:y173GBEXRqcB3ql/UVBSAkkvfiuSOoPO+n2R:y173UxcBg/UvSAk4E7PO+2
Malware Config
Signatures
Files
-
3e25d8d740148786fab6b00b68963d2233ff58fa83df408c97a4ab1f3c83ba1e.exe windows x86
48ddfe28d93e1e4f4f0ecee5b2b5962e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringW
MessageBoxW
LoadIconW
PostMessageW
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
shell32
CommandLineToArgvW
netapi32
NetApiBufferFree
NetUserModalsGet
ole32
CoUninitialize
CoInitialize
crypt32
CryptMsgGetParam
CertEnumSystemStoreLocation
CryptMsgClose
kernel32
GetTickCount
CancelWaitableTimer
GetCommandLineW
GetModuleHandleA
GetCurrentThreadId
InterlockedExchange
ProcessIdToSessionId
GetLastError
ExitProcess
CloseHandle
LocalFree
LocalAlloc
GetCurrentProcessId
GetCurrentThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcess
QueryPerformanceCounter
TerminateProcess
GetStartupInfoA
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ