Static task
static1
Behavioral task
behavioral1
Sample
3b75f2c9490d309c48e42d247664e7c4180c66a2cca91c42350e91e8f91d6d06.exe
Resource
win7-20220812-en
General
-
Target
3b75f2c9490d309c48e42d247664e7c4180c66a2cca91c42350e91e8f91d6d06
-
Size
220KB
-
MD5
6588c76978cf53e6fdef50c5f2f87360
-
SHA1
7c9f95e2e561c935e62bc2fd1578b96f237d15da
-
SHA256
3b75f2c9490d309c48e42d247664e7c4180c66a2cca91c42350e91e8f91d6d06
-
SHA512
61b3090dd8ec445e0e095e2d9c0fcc1803d64e5e2edd85eaca6b1052d4069838ab4a00f06c55ef64871356a114595b6de9f74c091630817c671561da29e52112
-
SSDEEP
6144:o/KINFBJNYtGucU4AlOLv8pgImYGgVkSJie1yBIP:LMFzNYtktAEj8yIc4rJim
Malware Config
Signatures
Files
-
3b75f2c9490d309c48e42d247664e7c4180c66a2cca91c42350e91e8f91d6d06.exe windows x86
bf707741581e4851c91235a45375b07e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrW
PathFileExistsW
PathAppendW
kernel32
GetTickCount
ExitProcess
GetCommandLineW
FreeLibrary
CreateProcessW
LoadLibraryExW
WaitForSingleObject
GetModuleHandleW
IsProcessorFeaturePresent
GetModuleFileNameW
lstrlenW
GetProcAddress
CloseHandle
user32
MessageBoxW
comctl32
ord17
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 970B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE