Static task
static1
Behavioral task
behavioral1
Sample
34d8dda8a13b375fa3f0646c0d96053b4f22b7978863d556a1a90accc8d63b27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34d8dda8a13b375fa3f0646c0d96053b4f22b7978863d556a1a90accc8d63b27.exe
Resource
win10v2004-20220812-en
General
-
Target
34d8dda8a13b375fa3f0646c0d96053b4f22b7978863d556a1a90accc8d63b27
-
Size
200KB
-
MD5
475d3b32284d77b6c47040db0d5b6644
-
SHA1
889e1e531623982e017ea1d735568f88b5ed6cef
-
SHA256
34d8dda8a13b375fa3f0646c0d96053b4f22b7978863d556a1a90accc8d63b27
-
SHA512
a8919060075b28e923d65e7426461d01b0e4c37e702850fc4751b3b3b8fad24423d6344382526a164e73b5db84f25411271e6d3bd5eb3d8687f1cdcec8660426
-
SSDEEP
1536:XbDvA9bLg09SIp426K3KMl7l2lK38DI41fl+Yc0bEeLSCybNofjDnVzzbsA4P:XYbc09xGrABT2ls8DIM+Yc0gI4MjOp
Malware Config
Signatures
Files
-
34d8dda8a13b375fa3f0646c0d96053b4f22b7978863d556a1a90accc8d63b27.exe windows x86
a17864495de378cb62d4d3ac640b06ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadLocale
SetConsoleOutputCP
WideCharToMultiByte
GetPrivateProfileStringW
GetPrivateProfileIntW
GetConsoleScreenBufferInfo
GetStdHandle
WritePrivateProfileStringA
GetCurrentDirectoryW
DeleteFileW
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
LoadLibraryA
GetProcAddress
CreateFileW
SetStdHandle
GetLastError
HeapFree
HeapAlloc
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoA
ReadFile
CloseHandle
WriteFile
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetEndOfFile
user32
OemToCharA
RegisterWindowMessageW
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE