Static task
static1
Behavioral task
behavioral1
Sample
3cd9cd801bf7ac3664386fe0c8fb0f81ede6b41eef9e287f010fe7adbdb1c880.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3cd9cd801bf7ac3664386fe0c8fb0f81ede6b41eef9e287f010fe7adbdb1c880.exe
Resource
win10v2004-20220812-en
General
-
Target
3cd9cd801bf7ac3664386fe0c8fb0f81ede6b41eef9e287f010fe7adbdb1c880
-
Size
320KB
-
MD5
a1da2387c1f5f3fb13da02e60a6138f0
-
SHA1
218db1364f34f3abb86faa2ad59a0bdefdbc3e37
-
SHA256
3cd9cd801bf7ac3664386fe0c8fb0f81ede6b41eef9e287f010fe7adbdb1c880
-
SHA512
f9a79b1e19ff1c61a90523fba9719fa8aa52ca8f36708ec7997404cff3648cdf61aebc3c95d1766bf665505648b48b8e4b6514b84c2af21ef013069d14832b14
-
SSDEEP
6144:mxBZcGv/5QmOcH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:cgI/5kq2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
3cd9cd801bf7ac3664386fe0c8fb0f81ede6b41eef9e287f010fe7adbdb1c880.exe windows x86
47a9ae01b9edfbde3980c5a09c2a24a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
QueryDosDeviceA
RtlCaptureContext
GetConsoleCP
SetClientTimeZoneInformation
GetProcessId
SwitchToThread
GetStdHandle
GlobalUnfix
CreateFileMappingW
ResumeThread
GetPrivateProfileSectionNamesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE