Static task
static1
Behavioral task
behavioral1
Sample
3950920f10f074c7eca5ae51ca3192636c28f92af86f6fd3d1a87d6b06537353.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3950920f10f074c7eca5ae51ca3192636c28f92af86f6fd3d1a87d6b06537353.exe
Resource
win10v2004-20220812-en
General
-
Target
3950920f10f074c7eca5ae51ca3192636c28f92af86f6fd3d1a87d6b06537353
-
Size
84KB
-
MD5
671846eb2f48ddba8c545964d1aa05e0
-
SHA1
661b0f0608fe23b6d9dff4a816be31eeb48889b9
-
SHA256
3950920f10f074c7eca5ae51ca3192636c28f92af86f6fd3d1a87d6b06537353
-
SHA512
66f8276dfabc5e06fcffa4bf84e0403763b2879c1445b6adde347d395a020bcf888ff25a39aacab841ebf425411c14dee9ea64ce303b1ff67b9769ede44dec4b
-
SSDEEP
1536:Y4X0IufwhKZeqDySSY+A37feaCMJDmYsLIb4PvYqHB/AdGK:1+wDqDySSDADeak7dJHB/AdGK
Malware Config
Signatures
Files
-
3950920f10f074c7eca5ae51ca3192636c28f92af86f6fd3d1a87d6b06537353.exe windows x86
8610c125a7f5cc13861d9265d4a70a3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
FlushFileBuffers
GetPrivateProfileStringA
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
HeapAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualAlloc
HeapReAlloc
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
CloseHandle
user32
MessageBoxA
advapi32
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ