Static task
static1
Behavioral task
behavioral1
Sample
3238d03b23ed17b6e3db10a45c7efa6ca25ccba990866e59b2c7c8190d965274.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3238d03b23ed17b6e3db10a45c7efa6ca25ccba990866e59b2c7c8190d965274.exe
Resource
win10v2004-20220812-en
General
-
Target
3238d03b23ed17b6e3db10a45c7efa6ca25ccba990866e59b2c7c8190d965274
-
Size
77KB
-
MD5
4318721ae544ea6f8a89dc792b5ac2c0
-
SHA1
f2a33cf4a0292e33cac699ca6d5ccbbdcba56513
-
SHA256
3238d03b23ed17b6e3db10a45c7efa6ca25ccba990866e59b2c7c8190d965274
-
SHA512
435ba09f937500ad4c0a055f8efb7eb859d24196e220b3de46c9afa8b66e37338dff5fbecc53f3fcb439287f41a9e8c3be68ca8b6f29d8fe117d27641d7ce315
-
SSDEEP
1536:6PqQTexTu6X/2oymVyhfsaqJqj3Zz9Tg6L73Kf0alo:bQixal7jJJTFUK
Malware Config
Signatures
Files
-
3238d03b23ed17b6e3db10a45c7efa6ca25ccba990866e59b2c7c8190d965274.exe windows x86
824b24792ec91b1cd12bd675228dca37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
GetFileAttributesA
GetPriorityClass
ReadConsoleW
GetLocaleInfoA
ReleaseMutex
CreateDirectoryA
GetProcessHeap
VirtualProtect
DeleteFileA
HeapSize
CreatePipe
GetModuleHandleA
GetDriveTypeA
RemoveDirectoryA
WriteFile
IsBadWritePtr
ResetEvent
SetLastError
GetStdHandle
SetLocalTime
user32
DestroyMenu
SetFocus
PeekMessageA
GetCaretPos
LoadCursorA
DrawIcon
GetCapture
GetWindowTextW
wsprintfA
PostMessageA
SetCursor
GetWindowLongW
DispatchMessageA
els
DllGetClassObject
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ