Static task
static1
Behavioral task
behavioral1
Sample
343f7f03becbe21afe88055e2e8ae5033c9a2204384428df08680ca700b731bb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
343f7f03becbe21afe88055e2e8ae5033c9a2204384428df08680ca700b731bb.exe
Resource
win10v2004-20220812-en
General
-
Target
343f7f03becbe21afe88055e2e8ae5033c9a2204384428df08680ca700b731bb
-
Size
285KB
-
MD5
6ce3c17c163d47805caaf71b79cb93d0
-
SHA1
c5a1e578d01d02f6e4be58ac0328104199cc23c4
-
SHA256
343f7f03becbe21afe88055e2e8ae5033c9a2204384428df08680ca700b731bb
-
SHA512
7720b993c42650450fb66a4ee0245e27ccdccbf0876fdf59989c11ab33f84dcad9ed6e23e5dc59c17fd5b8a044915fddd2cc61c3380c3d4453036b57b122cc04
-
SSDEEP
6144:N4NsET41DkEvEPoZrGc0r5KKE+6Oxij7krYz/TbjdvGKL9zSYkEQX:4syAkFPoh0NhE6gvkUrTVGOzGf
Malware Config
Signatures
Files
-
343f7f03becbe21afe88055e2e8ae5033c9a2204384428df08680ca700b731bb.exe windows x86
ec410d72ab98938b9f8783b491eebbf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
w32topl
ToplSTHeapInit
ToplScheduleCreate
ToplSTHeapDestroy
ToplScheduleCacheCreate
ToplScheduleDuration
ToplScheduleCacheDestroy
ToplScheduleExportReadonly
ToplSTHeapExtractMin
fmifs
ComputeFmMediaType
DiskCopy
FormatEx
EnableVolumeCompression
Chkdsk
Format
Extend
kernel32
lstrcpyW
HeapFree
HeapAlloc
SystemTimeToFileTime
lstrcmpA
WideCharToMultiByte
GetSystemTimeAsFileTime
SetLastError
SetUnhandledExceptionFilter
QueryPerformanceCounter
CloseHandle
GetLocalTime
GetProcessHeap
FindResourceW
GetLocaleInfoW
GetCurrentProcess
CreateFileA
GetCurrentProcessId
GetTickCount
GetOEMCP
LoadLibraryA
MultiByteToWideChar
Sections
.text Size: 275KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ