Static task
static1
Behavioral task
behavioral1
Sample
3a769660ede8621dc063da4979637974c8a8f2f4ca16ee42c303d20300565005.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a769660ede8621dc063da4979637974c8a8f2f4ca16ee42c303d20300565005.exe
Resource
win10v2004-20220812-en
General
-
Target
3a769660ede8621dc063da4979637974c8a8f2f4ca16ee42c303d20300565005
-
Size
16KB
-
MD5
6106b9c93d4f2623466a572ae0f8a420
-
SHA1
96fbb4346acc572b15c5266a4e6551522e827824
-
SHA256
3a769660ede8621dc063da4979637974c8a8f2f4ca16ee42c303d20300565005
-
SHA512
0cad922cfa15332d3d28e52230290f1c0c45cb18d3d344cbd8265068c47e5922ef38851c719bee14da2e3cf0dc466de446fdabcfc694b2cb9941269af7e61798
-
SSDEEP
384:YmdEaciYiPClC4cXHgDOEJZzrm//3NpMJYaw/V2mT05Gm839:YmdEHi3ag9XtEJZzrm/PNpMV69Tx3
Malware Config
Signatures
Files
-
3a769660ede8621dc063da4979637974c8a8f2f4ca16ee42c303d20300565005.exe windows x86
7d003413a8d2162953fab304b8d3df81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
WriteProcessMemory
ReadProcessMemory
OpenProcess
GetVersionExA
Sleep
GetFileAttributesExA
WriteFile
CreateFileA
GetTempPathA
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ExitProcess
GetLastError
CreateMutexA
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
FindWindowExA
MoveWindow
GetWindowRect
GetSystemMetrics
GetWindowThreadProcessId
SendMessageW
FindWindowA
shell32
ShellExecuteA
wininet
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle
msvcr100
_itoa
_crt_debugger_hook
_except_handler4_common
srand
memset
memcpy
rand
_wcsicmp
strstr
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ