Static task
static1
Behavioral task
behavioral1
Sample
3228e47cdae5f5160359477a670aa54436fb68f18414af39bde70ffb35051216.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3228e47cdae5f5160359477a670aa54436fb68f18414af39bde70ffb35051216.exe
Resource
win10v2004-20220812-en
General
-
Target
3228e47cdae5f5160359477a670aa54436fb68f18414af39bde70ffb35051216
-
Size
189KB
-
MD5
783bd85c34ec79307a72ddedb1462010
-
SHA1
f18214d3e82bd67a1a11c083142c51eb61d27b9c
-
SHA256
3228e47cdae5f5160359477a670aa54436fb68f18414af39bde70ffb35051216
-
SHA512
11ac7364db90d117b5dc2a20745161e2c7e0e2a213a0064fb65229a579f052b14b635c812f2d74b553403e62446af9b8443ea1c62c00e3b13c50820c7bc47512
-
SSDEEP
3072:zGqq9vZj+LJ/CdR9HSrJtJgYduaaylQpnjAjIV8xi+46L00nw+yy1x3oKPgSlPA:UTj2KLhI7HnQpair7i3T
Malware Config
Signatures
Files
-
3228e47cdae5f5160359477a670aa54436fb68f18414af39bde70ffb35051216.exe windows x86
86981c24889fb7ce0459e57576b21ab7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
GetEnvironmentStringsW
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
GetCurrentProcess
GetCommandLineA
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
MultiByteToWideChar
ExitProcess
gdi32
SetWinMetaFileBits
SetBkColor
RectVisible
PolyBezierTo
CombineTransform
StrokePath
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ