Static task
static1
Behavioral task
behavioral1
Sample
3797d71b7ed0e54afbdd8e98b10e6e144dae5674a0562f41ece6f3b9a4f88816.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3797d71b7ed0e54afbdd8e98b10e6e144dae5674a0562f41ece6f3b9a4f88816.exe
Resource
win10v2004-20220812-en
General
-
Target
3797d71b7ed0e54afbdd8e98b10e6e144dae5674a0562f41ece6f3b9a4f88816
-
Size
69KB
-
MD5
643de8a4e36b80a51a6492cef5519350
-
SHA1
d7bfb66426d983145d649d911ed959112b2fb855
-
SHA256
3797d71b7ed0e54afbdd8e98b10e6e144dae5674a0562f41ece6f3b9a4f88816
-
SHA512
9ef4080985d73bc8568c1b4fd05dd42e9c224d52d09f9bae85e31ea4b24d9cd2a1118464eef5fc265f7cbf95e509e9ff6d2151a08521d7334e1d385f99ee505d
-
SSDEEP
1536:XF9kpzjSAnirPi8+EPHVkhI3iFs46INgOVHEj75u5g:XF9kpzjSAnid+EmhVFskKiG7g5g
Malware Config
Signatures
Files
-
3797d71b7ed0e54afbdd8e98b10e6e144dae5674a0562f41ece6f3b9a4f88816.exe windows x86
456738d493309baafbcd286b86234d40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadCodePtr
WriteConsoleW
IsValidLocale
DisconnectNamedPipe
GetModuleHandleA
lstrcpyW
SetPriorityClass
lstrlenW
GetFileAttributesA
GetStartupInfoA
ReleaseMutex
HeapCreate
WriteConsoleW
GetLastError
GetFileSize
IsBadStringPtrA
CreatePipe
WriteConsoleW
CopyFileW
GetCurrentDirectoryA
CloseHandle
msftedit
RichListBoxWndProc
RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichEditWndProc
shell32
StrChrA
SHGetDiskFreeSpaceA
ShellMessageBoxA
DragAcceptFiles
SHGetMalloc
ShellMessageBoxA
SHGetSettings
SHGetMalloc
ExtractIconA
ShellAboutA
DuplicateIcon
SHGetDiskFreeSpaceA
DragQueryFileA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ