Static task
static1
Behavioral task
behavioral1
Sample
c3b481573144de974ba1522899bd9949d1790135534b4c281737679efb5ad885.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c3b481573144de974ba1522899bd9949d1790135534b4c281737679efb5ad885.exe
Resource
win10v2004-20220812-en
General
-
Target
c3b481573144de974ba1522899bd9949d1790135534b4c281737679efb5ad885
-
Size
119KB
-
MD5
12c5cda10d963afd0e22975182cd6291
-
SHA1
d3c113b378dd76a2d69f3283fb28b61a52f1bf89
-
SHA256
c3b481573144de974ba1522899bd9949d1790135534b4c281737679efb5ad885
-
SHA512
14ea4433b416d65cbdde3780f46c3e7d29827c69165cd66ec28e764f10fd26342c0177e59f73c35484b0e6a9310295f19e28af0728d8e34c5339edd8986d1226
-
SSDEEP
3072:S/pNXQ1VQqXBYPpW3rSYpFhBHCX5nOhLN:Sb+8WjvhBHgtORN
Malware Config
Signatures
Files
-
c3b481573144de974ba1522899bd9949d1790135534b4c281737679efb5ad885.exe windows x86
9edcc0a01f993b4638f64cbd4f6974e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
BuildCommDCBW
PostQueuedCompletionStatus
MapViewOfFileEx
ReplaceFileA
CreateProcessA
TransactNamedPipe
GetNumberOfConsoleFonts
GetSystemPowerStatus
VirtualBufferExceptionHandler
GetStartupInfoW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE