Static task
static1
Behavioral task
behavioral1
Sample
3e503d736ad60bec91a2c46541bda8989dc1b9809348f2b2885aeeaae3d5929c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e503d736ad60bec91a2c46541bda8989dc1b9809348f2b2885aeeaae3d5929c.exe
Resource
win10v2004-20220812-en
General
-
Target
3e503d736ad60bec91a2c46541bda8989dc1b9809348f2b2885aeeaae3d5929c
-
Size
292KB
-
MD5
a134a52113c6eb488e3cec4b038d1c80
-
SHA1
e6f58de585332b491f43bbf127d1a9243f770a49
-
SHA256
3e503d736ad60bec91a2c46541bda8989dc1b9809348f2b2885aeeaae3d5929c
-
SHA512
be5dd8f33821aed48ced2705fd20f601b329898d5d2872e299c118a80be6c630c331dfad4c1129cf0268072bce8ee08bd656b670bbb37e3c7f262fb527dab626
-
SSDEEP
3072:HOogKZc4lCB9yqOrzAInphmim8CZN4reUN6ZGEYYmDIByGWdxR52fRSSG:HXzqgGL8lrFQBYYjBgr2fRSS
Malware Config
Signatures
Files
-
3e503d736ad60bec91a2c46541bda8989dc1b9809348f2b2885aeeaae3d5929c.exe windows x86
36860809882ac8faf27ae4e57023d0c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
InterlockedDecrement
GetModuleHandleA
SuspendThread
VirtualAlloc
VirtualProtect
GetLocaleInfoA
CloseHandle
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
SetFilePointer
FlushFileBuffers
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetSystemInfo
user32
DestroyWindow
GetDesktopWindow
FindWindowA
LoadBitmapA
ole32
CoInitialize
CoUninitialize
winscard
SCardGetCardTypeProviderNameW
ws2_32
select
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eseg Size: 4KB - Virtual size: 76B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sgld Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vgld Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vgs Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ