Static task
static1
Behavioral task
behavioral1
Sample
3748a092efa84cc8a5bbcbdebd26c96d04b1fe04561964d4661a77b0d7551161.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3748a092efa84cc8a5bbcbdebd26c96d04b1fe04561964d4661a77b0d7551161.exe
Resource
win10v2004-20220901-en
General
-
Target
3748a092efa84cc8a5bbcbdebd26c96d04b1fe04561964d4661a77b0d7551161
-
Size
144KB
-
MD5
a0e659d0e4fbbf3eb11124e26c84b630
-
SHA1
bd52608e0d9031f83ce15c66157a34d6b0189d66
-
SHA256
3748a092efa84cc8a5bbcbdebd26c96d04b1fe04561964d4661a77b0d7551161
-
SHA512
c64e21d00b8795212925701d47346a5966a11f4130e374856911d096662043f185239b81d47b61c789792e93f2279562cab68147b6a65f0981a21e00f787ca30
-
SSDEEP
3072:3TKybDr3NLiXtHJ2l44/GR+AaUEhzcUQWle3E:pbXKW4tR4uU60
Malware Config
Signatures
Files
-
3748a092efa84cc8a5bbcbdebd26c96d04b1fe04561964d4661a77b0d7551161.exe windows x86
a60b6195c6c0a9d3d59ea92bc9eeb259
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
InterlockedDecrement
GetStartupInfoA
GetCurrentThreadId
GetStartupInfoW
InterlockedIncrement
GetCurrentProcessId
GetCurrentProcess
GetCurrentThread
QueryPerformanceCounter
GetModuleHandleA
VirtualAlloc
GetStringTypeW
GetModuleHandleW
DeleteCriticalSection
HeapAlloc
GetSystemInfo
WideCharToMultiByte
FindFirstFileW
LoadLibraryW
SetFilePointer
HeapSize
WaitForSingleObjectEx
CreateEventW
WriteFile
MultiByteToWideChar
FreeEnvironmentStringsW
GetModuleFileNameA
SetHandleCount
SetEndOfFile
CreateFileA
TryEnterCriticalSection
EnterCriticalSection
TlsFree
ExitProcess
HeapCreate
LoadResource
GetVersionExW
GetOEMCP
GlobalAlloc
FindClose
FormatMessageW
HeapDestroy
ReadFile
FreeLibrary
lstrlenW
GetEnvironmentStringsW
GetFileAttributesW
InterlockedCompareExchange
LocalFree
HeapFree
WaitForSingleObject
LeaveCriticalSection
LCMapStringW
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
IsValidCodePage
GetVersionExA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLastError
GetCommandLineA
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
user32
GetSystemMetrics
msi
ord50
shell32
SHFileOperationW
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ