Static task
static1
Behavioral task
behavioral1
Sample
3f83cc7e9ccba7e39cb307d33b85239f403bfd055a8f82e5c85a44e0e071527f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3f83cc7e9ccba7e39cb307d33b85239f403bfd055a8f82e5c85a44e0e071527f.exe
Resource
win10v2004-20220901-en
General
-
Target
3f83cc7e9ccba7e39cb307d33b85239f403bfd055a8f82e5c85a44e0e071527f
-
Size
72KB
-
MD5
620a99d16c8488e20aa48707ccf886b0
-
SHA1
520b84adff10e47868c4c982637604651fd9abb3
-
SHA256
3f83cc7e9ccba7e39cb307d33b85239f403bfd055a8f82e5c85a44e0e071527f
-
SHA512
06914f2574b345cdfbbe2d14dfe1795a0be055ed2950709924aebb77d5366ad66c1a5c99d4c2e75ee2a8eb22a4505b5033f43fb39d1b3a63b15b613ba74c3313
-
SSDEEP
1536:kvcCq7tT+oO0SbxEgnokS80w8Xb/x6HmjXge4p:qcl7p+D0SNJ0/55jXge4
Malware Config
Signatures
Files
-
3f83cc7e9ccba7e39cb307d33b85239f403bfd055a8f82e5c85a44e0e071527f.exe windows x86
3ee11af8aa4c9a2cf227a292fa16c1fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
DeleteFileA
ResumeThread
ClearCommBreak
HeapDestroy
CreateEventW
DeviceIoControl
GetCurrentThread
SetLastError
GetStringTypeW
LoadLibraryW
GetPrivateProfileSectionA
CreateEventA
HeapFree
VirtualProtectEx
TlsGetValue
DeviceIoControl
lstrlenA
GetPrivateProfileIntW
GetFileAttributesW
GetDriveTypeA
clbcatq
SetSetupSave
ComPlusMigrate
DllGetClassObject
SetSetupSave
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen
SetupOpen
SetupOpen
pdh
PdhGetLogFileSize
PdhCloseLog
PdhGetLogFileTypeA
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ