Static task
static1
Behavioral task
behavioral1
Sample
3a0c01b21eb29a5922c0c9db295fe9daf76f1e714b2174d032d9988a02f39e48.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a0c01b21eb29a5922c0c9db295fe9daf76f1e714b2174d032d9988a02f39e48.exe
Resource
win10v2004-20220901-en
General
-
Target
3a0c01b21eb29a5922c0c9db295fe9daf76f1e714b2174d032d9988a02f39e48
-
Size
311KB
-
MD5
452c17641ba26a3d340deabf52779da0
-
SHA1
44bfdf6ac3bb3851561d4324fe305afbd2290185
-
SHA256
3a0c01b21eb29a5922c0c9db295fe9daf76f1e714b2174d032d9988a02f39e48
-
SHA512
f647d9af4c8ca19dd3d848f3476c80d0ffa8363ed04c4f7188a2273730d304c45a4e6fb8776a8a9e11d97c02057d900ebff2fc5d9bfab505a29bfb6fc3dc6efe
-
SSDEEP
6144:bsL85fz7JEsE3tadSWiD3j8STiQ3Op9ASwPrs4KVqqu:wL85XJNsBv8TvASArsPF
Malware Config
Signatures
Files
-
3a0c01b21eb29a5922c0c9db295fe9daf76f1e714b2174d032d9988a02f39e48.exe windows x86
09a42707370689b734f5e20a2e339c9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeA
CloseHandle
GetCurrentThread
GetStringTypeA
GetStdHandle
GetPrivateProfileSectionA
HeapFree
VirtualProtectEx
RemoveDirectoryA
GetFileAttributesW
CreateEventA
GetFileAttributesW
CreateDirectoryW
GlobalLock
DeviceIoControl
GlobalFlags
GetVersionExA
GetCurrentProcess
GetPrivateProfileIntA
LoadLibraryA
FindVolumeClose
shell32
DllUnregisterServer
DllUnregisterServer
DragQueryFileA
ShellMessageBoxA
ShellAboutA
SHGetMalloc
ExtractIconA
DuplicateIcon
DragAcceptFiles
SHFree
SHGetSettings
StrChrA
DragFinish
ntmarta
AccConvertSDToAccess
AccFreeIndexArray
AccGetExplicitEntries
AccConvertAclToAccess
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ