Static task
static1
Behavioral task
behavioral1
Sample
3c874889db0f60d5f1779c070a4fd404f2ba8abd055398c371a062f97c564b59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3c874889db0f60d5f1779c070a4fd404f2ba8abd055398c371a062f97c564b59.exe
Resource
win10v2004-20220901-en
General
-
Target
3c874889db0f60d5f1779c070a4fd404f2ba8abd055398c371a062f97c564b59
-
Size
1.3MB
-
MD5
334706c6506ce8e39566e869045189d5
-
SHA1
bea7d39236cded32888cf35746253f6b6270055f
-
SHA256
3c874889db0f60d5f1779c070a4fd404f2ba8abd055398c371a062f97c564b59
-
SHA512
752f15b648b6a970cf94b6662296f4e017d6b20e1c4882e242b05655ea03fd5a2e82f9a7c7b374b949df10d3521821030db6040147020d05ea92b709ea5ef38a
-
SSDEEP
24576:6yYMkD8vd39z5e8RUt/lul7JQVFCIgEsPCPemZ4/df5ntIq9TS8/A49:my39z4x5EFJUAEsPCkM8/D
Malware Config
Signatures
Files
-
3c874889db0f60d5f1779c070a4fd404f2ba8abd055398c371a062f97c564b59.exe windows x86
65375c2b4e48538d2ec7bb6f97888f6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
imagehlp
MakeSureDirectoryPathExists
shlwapi
StrStrA
user32
GetPropA
gdi32
GetTextExtentPointA
comdlg32
PrintDlgA
winspool.drv
DocumentPropertiesA
advapi32
LookupPrivilegeValueA
shell32
ExtractIconA
comctl32
_TrackMouseEvent
ole32
CLSIDFromString
oleaut32
SysAllocString
Sections
.text Size: 1.3MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE