Static task
static1
Behavioral task
behavioral1
Sample
3530d5a324871093932f402ab8b97d0e517e2d7cc79929b649ebfc2d4df16d89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3530d5a324871093932f402ab8b97d0e517e2d7cc79929b649ebfc2d4df16d89.exe
Resource
win10v2004-20220812-en
General
-
Target
3530d5a324871093932f402ab8b97d0e517e2d7cc79929b649ebfc2d4df16d89
-
Size
116KB
-
MD5
a09dcf9176a838393d358ea9a9a2bb6d
-
SHA1
815d6b861a7451cf0f10e3e0b7968ab8fe6f023c
-
SHA256
3530d5a324871093932f402ab8b97d0e517e2d7cc79929b649ebfc2d4df16d89
-
SHA512
49318bbd66b5e0662c03f9db298661538b7e3049c43422181494d851c510efc0cdec1ec7f4a8cf2af9215fe5d073a2c2a59b48a18214e7afcb9bbc348969456a
-
SSDEEP
1536:WI0wXeU62j8EPM6g+J2P6pU7kcFBUOTnlMYcgzndYvqhHxdoUq/uO7:WI0p2YeXNtpUrr7l9c+dYvqBo6O7
Malware Config
Signatures
Files
-
3530d5a324871093932f402ab8b97d0e517e2d7cc79929b649ebfc2d4df16d89.exe windows x86
9e1420b4e758c84b3caf48938fe88692
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetVersion
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
WriteFile
CloseHandle
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetTickCount
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
VirtualAlloc
TlsAlloc
SetFilePointer
GetEnvironmentStrings
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
PostQuitMessage
LoadIconW
MessageBoxA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
FindWindowA
DefWindowProcA
DestroyWindow
BeginPaint
GetClientRect
EndPaint
advapi32
RegOpenKeyExA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ