Static task
static1
Behavioral task
behavioral1
Sample
3e680c2c6ece981fd1cf4c5b2c4200965a8dda28ffa5b4c1d0f4671d087cc76f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e680c2c6ece981fd1cf4c5b2c4200965a8dda28ffa5b4c1d0f4671d087cc76f.exe
Resource
win10v2004-20220901-en
General
-
Target
3e680c2c6ece981fd1cf4c5b2c4200965a8dda28ffa5b4c1d0f4671d087cc76f
-
Size
219KB
-
MD5
a22b89542589d8ccfa097a014dd64a6e
-
SHA1
5d5bc602aef39c4154acb16adb92236247a5f514
-
SHA256
3e680c2c6ece981fd1cf4c5b2c4200965a8dda28ffa5b4c1d0f4671d087cc76f
-
SHA512
c25970e9df1f99caa374f770f629d21506986daebf0b74949cceb1fbefa2122ee9c187144e4dbec642639c29bc29a05b3961c8d2241be0f353b871f125a45376
-
SSDEEP
3072:d3tsOQyatx56EuHPki05WuxEyIslrbZZiPZcnX2UChWOdX4vw:d3tsOtCx51/W+IsZbeP+2nZ4Y
Malware Config
Signatures
Files
-
3e680c2c6ece981fd1cf4c5b2c4200965a8dda28ffa5b4c1d0f4671d087cc76f.exe windows x86
c97cafd91f77592d0f0c5dd3a6c5eb6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
kernel32
GetVersionExW
MulDiv
FreeLibrary
LoadLibraryA
lstrlenA
SizeofResource
GetCurrentThreadId
HeapAlloc
FlushInstructionCache
GetCurrentProcess
LoadLibraryExA
GetModuleHandleA
InterlockedDecrement
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetTickCount
QueryPerformanceCounter
WriteFile
ole32
CoRegisterMallocSpy
OleIsCurrentClipboard
GetErrorInfo
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ