Static task
static1
Behavioral task
behavioral1
Sample
3f233554c901c47d35e3ecb3b9d278d49d9fd44b7e3d80172f6d0b9b53732987.exe
Resource
win7-20220812-en
General
-
Target
3f233554c901c47d35e3ecb3b9d278d49d9fd44b7e3d80172f6d0b9b53732987
-
Size
951KB
-
MD5
652ec501e05a6d3c138aa9d69e488760
-
SHA1
5c7036d79f4e162ae6c98529036ec039daa9f44b
-
SHA256
3f233554c901c47d35e3ecb3b9d278d49d9fd44b7e3d80172f6d0b9b53732987
-
SHA512
1b1718f623efc11e6c9cf3738a613c9fe9702f0559c03da1f40a3ae50c0730461df9d0ac1f052f564c53ca4f44122fc44a836f280d0abd88789632bc9ea0beb0
-
SSDEEP
12288:w7Et++VV43Q/7FpRIzeot++VV43Q/7FpRIzelqLZqc:+Wy3Q/KeSy3Q/Kela
Malware Config
Signatures
Files
-
3f233554c901c47d35e3ecb3b9d278d49d9fd44b7e3d80172f6d0b9b53732987.exe windows x86
4b4f6dadfc6027b88688faf404cf4f6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleW
GetCurrentProcess
GetStringTypeW
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RtlUnwind
LoadLibraryW
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoInitializeEx
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 914KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE