Static task
static1
Behavioral task
behavioral1
Sample
3aa84684d75baa4d48194b7ff30cab0016530ccc6a2448091f53056d48fe76cb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3aa84684d75baa4d48194b7ff30cab0016530ccc6a2448091f53056d48fe76cb.exe
Resource
win10v2004-20220812-en
General
-
Target
3aa84684d75baa4d48194b7ff30cab0016530ccc6a2448091f53056d48fe76cb
-
Size
7KB
-
MD5
63d895c5fe370091d1f92ce0c04bedf7
-
SHA1
593dbf4a7cd563d75d377694f2a29ef250129153
-
SHA256
3aa84684d75baa4d48194b7ff30cab0016530ccc6a2448091f53056d48fe76cb
-
SHA512
e3814a563a340a6c1f7ffe1e9be5a2282023dda82e7bdec6a854a3e2521f87f5a0afff7ef7b86d282a6e5d4759ef4b025eba69ddc11f6407e4922f311a6306f5
-
SSDEEP
96:ifIFZxmmDcniGq1RBD9j9k/E2lYpUP5uOWXKc7UC4TnBorWnxvrMHowcq2A11c5M:VzIEwxOD9j9iEwYIcXPFYtrMHoPC1c5M
Malware Config
Signatures
Files
-
3aa84684d75baa4d48194b7ff30cab0016530ccc6a2448091f53056d48fe76cb.exe windows x86
50ea42e92a787efde23a91f8b699a0bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCancelTimer
NtClose
NtAccessCheckByType
NtClearEvent
NlsAnsiCodePage
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
kernel32
FindNextFileW
GetCommProperties
WriteTapemark
GetComputerNameW
shell32
Shell_NotifyIconW
StrNCmpW
SheFullPathW
SheRemoveQuotesW
Sections
.text Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 4B - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE