Static task
static1
Behavioral task
behavioral1
Sample
3488aeb10c51daa3fefbc8be64e7f65064c84ce524461fd8fc09b70c54976879.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3488aeb10c51daa3fefbc8be64e7f65064c84ce524461fd8fc09b70c54976879.exe
Resource
win10v2004-20220812-en
General
-
Target
3488aeb10c51daa3fefbc8be64e7f65064c84ce524461fd8fc09b70c54976879
-
Size
773KB
-
MD5
6cc596b269993dd469ba0e1e4e264cf0
-
SHA1
38d1a5744b599eec7b6e3fc2487b6ec60c61fd3f
-
SHA256
3488aeb10c51daa3fefbc8be64e7f65064c84ce524461fd8fc09b70c54976879
-
SHA512
88cdd4c651a50af5ed933ccb190ad56d5a6d05d48dc0a3b49f4369587cbdd5100bd10335985f1b313fa929de2a6d27411605d44db7b4101b2f7d03ae4c289204
-
SSDEEP
12288:1dkLikTwbFmKox3cEeByREheNKSfIEoayXqoZNfyMvVfAQRlD:1OGDbroBcEegRw1jEtorq8H
Malware Config
Signatures
Files
-
3488aeb10c51daa3fefbc8be64e7f65064c84ce524461fd8fc09b70c54976879.exe windows x86
91c0eae7a04465ea207515bd6d680d8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
FindClose
CreateMutexA
GetTickCount
GetModuleHandleA
GetEnvironmentVariableW
RemoveDirectoryA
GetFileAttributesA
OpenProcess
GetCommandLineW
CloseHandle
ResetEvent
SetLastError
DeleteFileA
WaitForSingleObject
VirtualAllocEx
HeapSize
SetEvent
CreateFileA
ExitProcess
GetStartupInfoW
user32
GetSysColor
GetDC
GetClassInfoA
GetDC
GetDC
FindWindowW
GetWindowLongA
DispatchMessageW
FillRect
CallWindowProcW
MessageBoxA
DispatchMessageW
PeekMessageA
perfctrs
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 767KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gqkzesa Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE