Static task
static1
Behavioral task
behavioral1
Sample
3c736646c78e1f7bbf22f90f30a9f9ad9aca49427ccbd847a9a6f1ff7c2bc475.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3c736646c78e1f7bbf22f90f30a9f9ad9aca49427ccbd847a9a6f1ff7c2bc475.exe
Resource
win10v2004-20220812-en
General
-
Target
3c736646c78e1f7bbf22f90f30a9f9ad9aca49427ccbd847a9a6f1ff7c2bc475
-
Size
268KB
-
MD5
61a3f4dc0c69aeeb46c92f132cddd870
-
SHA1
6ab84efdfaba0e5704c5d52dc3736d037b81e73e
-
SHA256
3c736646c78e1f7bbf22f90f30a9f9ad9aca49427ccbd847a9a6f1ff7c2bc475
-
SHA512
3c18360cb42ac23ef1b63770ee902c851bfea35f44f2dc549549d089fc54e0ca6857b51531fdca95865619ee189a9628f467ab0b5f6cf0c2a9fd990cf4b10d4d
-
SSDEEP
6144:efE6CjxeDRvLrtJ7zsVPcHqLPcvgV0mQkrWKa:eLIx4J70PcHq4U05aWKa
Malware Config
Signatures
Files
-
3c736646c78e1f7bbf22f90f30a9f9ad9aca49427ccbd847a9a6f1ff7c2bc475.exe windows x86
84f975ee59ceba252b86c9a033bc57b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
CloseHandle
WriteFile
CreateFileW
GetTempPathW
GetModuleFileNameW
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
WideCharToMultiByte
LCMapStringA
GetStringTypeW
shell32
ShellExecuteW
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ