Static task
static1
Behavioral task
behavioral1
Sample
3e24b318931eb7df79d967831f7993632bea222f2fd30fca87ede33cb2eeccd4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e24b318931eb7df79d967831f7993632bea222f2fd30fca87ede33cb2eeccd4.exe
Resource
win10v2004-20220812-en
General
-
Target
3e24b318931eb7df79d967831f7993632bea222f2fd30fca87ede33cb2eeccd4
-
Size
306KB
-
MD5
4a06974c5874804bc153303d560abf50
-
SHA1
6f69f8772a8b07370c566068e4bcc510b5256440
-
SHA256
3e24b318931eb7df79d967831f7993632bea222f2fd30fca87ede33cb2eeccd4
-
SHA512
ba0aeb1349ee5cf0afa23c1d9dcc947ee5f59cb4a41a1af6ad3922d9ef0a79b371c46ea7ef96cc4056e2ba369433edaf1077d99d281a6bd944dac432c5a7131b
-
SSDEEP
6144:rvYXQ8/32a7T/Y7VJaMod8LSZ4T4VFtkW3yfpXaTTCXVG3/gwS3dhg0j2p:rwJ/32aw7VJaM+ST4VnksQaTeG34T7gp
Malware Config
Signatures
Files
-
3e24b318931eb7df79d967831f7993632bea222f2fd30fca87ede33cb2eeccd4.exe windows x86
083f07ab8387519321bc134def8c3923
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidCodePage
CreateDirectoryW
GetTickCount
FindResourceW
LocalLock
FindClose
GetExitCodeThread
GetFileAttributesA
SetPriorityClass
TlsGetValue
SuspendThread
VirtualProtect
GetModuleHandleA
HeapFree
GetCurrentProcess
RemoveDirectoryW
GetFileAttributesA
SetLastError
MapViewOfFile
GetStringTypeA
GetLocaleInfoW
user32
PeekMessageW
GetWindowLongW
wsprintfW
SetFocus
DispatchMessageA
IsDialogMessageA
GetWindowTextW
IsWindow
LoadImageW
PostMessageW
DefDlgProcA
LoadCursorA
SetCursor
msctf
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE