Static task
static1
Behavioral task
behavioral1
Sample
3b542fea22b1c1021e5fe8de5338f4152d0c0b8b487976f182ce7b4039cb6e3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b542fea22b1c1021e5fe8de5338f4152d0c0b8b487976f182ce7b4039cb6e3b.exe
Resource
win10v2004-20220812-en
General
-
Target
3b542fea22b1c1021e5fe8de5338f4152d0c0b8b487976f182ce7b4039cb6e3b
-
Size
898KB
-
MD5
2625ddb1fce186fa9833ea71a1c861a0
-
SHA1
9c884638416af9dfb54c4001f60d2c70c479e327
-
SHA256
3b542fea22b1c1021e5fe8de5338f4152d0c0b8b487976f182ce7b4039cb6e3b
-
SHA512
05733e0b73351378c9b0fca8898b7900dec302a6e22b7ad10270808c53f82417bf9dda346cd43c1ca231ebcf3a824b555405a1d25c77f8f640ed0bf5f755a7de
-
SSDEEP
24576:j7fyR5bGLQ98gYKoU8JCd5C8WNa+OGQAVzt6:HfyR0Kx8MdWIm71t6
Malware Config
Signatures
Files
-
3b542fea22b1c1021e5fe8de5338f4152d0c0b8b487976f182ce7b4039cb6e3b.exe windows x86
1578f6fc297522f6dee034423217e830
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
SetEvent
CloseHandle
Sleep
IsDebuggerPresent
CreateFileW
DeleteFileA
GetStartupInfoA
GetConsoleAliasA
GetDriveTypeA
TlsAlloc
lstrlenA
CloseHandle
CreateFileMappingW
ReleaseMutex
HeapCreate
HeapDestroy
DeviceIoControl
GetCommandLineA
GetModuleHandleA
user32
DispatchMessageA
DrawTextW
DestroyWindow
FindWindowW
LoadImageA
DestroyMenu
GetWindowLongA
GetIconInfo
DispatchMessageA
CallWindowProcW
IsWindow
PeekMessageA
IsZoomed
cryptext
CryptExtAddPFX
CryptExtAddPFX
CryptExtAddPFX
CryptExtAddPFX
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 890KB - Virtual size: 891KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
doptpqx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE