Static task
static1
Behavioral task
behavioral1
Sample
3e42bb09b34dd71499f836bb83ea2af08ab8b8390ea2c3fc0ce56007e1633c52.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e42bb09b34dd71499f836bb83ea2af08ab8b8390ea2c3fc0ce56007e1633c52.exe
Resource
win10v2004-20220812-en
General
-
Target
3e42bb09b34dd71499f836bb83ea2af08ab8b8390ea2c3fc0ce56007e1633c52
-
Size
301KB
-
MD5
a223c6347de51909ee88cf4b91079390
-
SHA1
41a5fa7d894df3d8b694a5ac341faac1b76f2f5f
-
SHA256
3e42bb09b34dd71499f836bb83ea2af08ab8b8390ea2c3fc0ce56007e1633c52
-
SHA512
bb3f43ec7d18a0647a5047eaf59cccb5272169931c3b257addb7611f0ac1a5743261faa54c4defce0b81b64a5cf193a3210ec6a57a2f01a4b8deac030fde3778
-
SSDEEP
6144:hyWnhR5mCjiOZYRCvXUipArIQe0ODPNb4YZ7ysf36AjWkE:Lb5m3OZ+StArveLPN97ysf36
Malware Config
Signatures
Files
-
3e42bb09b34dd71499f836bb83ea2af08ab8b8390ea2c3fc0ce56007e1633c52.exe windows x86
6accba56784632ee92734e631996a297
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
GetLocaleInfoW
GetExitCodeThread
TlsGetValue
RemoveDirectoryW
GetTickCount
GetFileAttributesA
VirtualProtect
HeapFree
IsBadWritePtr
LocalLock
GetModuleHandleA
GetCurrentProcess
FindResourceW
CreateDirectoryW
GetFileAttributesA
FindClose
SetLastError
GetDriveTypeW
MapViewOfFile
IsValidCodePage
user32
IsDialogMessageA
SetCursor
DispatchMessageA
PostMessageW
LoadImageW
GetWindowTextW
SetFocus
GetWindowLongW
wsprintfW
LoadCursorA
PeekMessageW
IsWindow
LoadStringA
msctf
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE