Static task
static1
Behavioral task
behavioral1
Sample
3fbbffe398b324c22742260e238568d47b9702d5959719d7e375bf389ad56ebd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fbbffe398b324c22742260e238568d47b9702d5959719d7e375bf389ad56ebd.exe
Resource
win10v2004-20220812-en
General
-
Target
3fbbffe398b324c22742260e238568d47b9702d5959719d7e375bf389ad56ebd
-
Size
816KB
-
MD5
a1beb1fa5e567adbdf537460d69ef780
-
SHA1
d0ac6f6241fda1589704b0463561615bd9e32fb1
-
SHA256
3fbbffe398b324c22742260e238568d47b9702d5959719d7e375bf389ad56ebd
-
SHA512
1c951c4a1e89838fa6cbda3e98b188ff82451e1884faf01c0da9daa311eb59c3250c5a6c34c69c400015414bf261f1f174ab78117a66bfb5e6027d83decc7ab8
-
SSDEEP
12288:1NwSveW8vXewoMpeB/PbZ6HFzpK9k0OJOoQUKx2kjZKTPVMP2raSkzv:1Nv29vPoE0PEA9BOJOmKxN2PKurs
Malware Config
Signatures
Files
-
3fbbffe398b324c22742260e238568d47b9702d5959719d7e375bf389ad56ebd.exe windows x86
c43836cc7a2890cacb3e05ae64fe49fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetLastError
MoveFileA
LoadLibraryA
GetLastError
lstrlenW
GetLastError
GetLastError
OpenSemaphoreW
GetLastError
OpenMutexW
GetLastError
VirtualProtect
GetFileTime
GetVolumePathNameW
GetVolumeInformationW
GetCurrentDirectoryW
objsel
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
Sections
.play Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE